Overview

overview

10

Static

static

10

078ea9abf1...29.exe

windows7_x64

10

078ea9abf1...29.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    078ea9abf15660a4eb79610a9bcde42c36460d2762933eb6f6989044b6e7f029

  • Size

    1.7MB

  • Sample

    220516-pwnr5abgg9

  • MD5

    0597fff404a7ab54ff2ca78a62fdd8ca

  • SHA1

    e9fd7c4e7b3d98bfa41cba01f7ee0e346fac046a

  • SHA256

    078ea9abf15660a4eb79610a9bcde42c36460d2762933eb6f6989044b6e7f029

  • SHA512

    d1a3353b164b395f48784946aa66f41998a308a85bc19564b0867b9f0cd3f4568e9b972a1f60c40b883cf5195cbac1d0a5de9e52e07151b0e6c7f22ee4b9ff82

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      078ea9abf15660a4eb79610a9bcde42c36460d2762933eb6f6989044b6e7f029

    • Size

      1.7MB

    • MD5

      0597fff404a7ab54ff2ca78a62fdd8ca

    • SHA1

      e9fd7c4e7b3d98bfa41cba01f7ee0e346fac046a

    • SHA256

      078ea9abf15660a4eb79610a9bcde42c36460d2762933eb6f6989044b6e7f029

    • SHA512

      d1a3353b164b395f48784946aa66f41998a308a85bc19564b0867b9f0cd3f4568e9b972a1f60c40b883cf5195cbac1d0a5de9e52e07151b0e6c7f22ee4b9ff82

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks