Overview

overview

10

Static

static

10

00e5b4cde8...79.exe

windows7_x64

10

00e5b4cde8...79.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00e5b4cde87660fd3b3327670a9025bed9cbe6edf5fd7e6f3a9bb19ba2edc679

  • Size

    1.6MB

  • Sample

    220516-px46haedgp

  • MD5

    01931267021d9930be0d7ce575e313ae

  • SHA1

    b2c3a56c9ec1b8e101d8433d2d461ffc5ce4a753

  • SHA256

    00e5b4cde87660fd3b3327670a9025bed9cbe6edf5fd7e6f3a9bb19ba2edc679

  • SHA512

    fad5b3575dca3c51122de93238bad65f3b2ce782f0b4a1f568c1bd99ea28fd273b3eee914efcf7ee6f55ed69bff4b9f34f19e007ea0350034ea949470cdb9270

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      00e5b4cde87660fd3b3327670a9025bed9cbe6edf5fd7e6f3a9bb19ba2edc679

    • Size

      1.6MB

    • MD5

      01931267021d9930be0d7ce575e313ae

    • SHA1

      b2c3a56c9ec1b8e101d8433d2d461ffc5ce4a753

    • SHA256

      00e5b4cde87660fd3b3327670a9025bed9cbe6edf5fd7e6f3a9bb19ba2edc679

    • SHA512

      fad5b3575dca3c51122de93238bad65f3b2ce782f0b4a1f568c1bd99ea28fd273b3eee914efcf7ee6f55ed69bff4b9f34f19e007ea0350034ea949470cdb9270

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks