Overview

overview

10

Static

static

10

01fe1b52b9...8b.exe

windows7_x64

10

01fe1b52b9...8b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01fe1b52b91c952371a4256d3ccf0b69f66b9c8db2e7a18ae54ea80690e44f8b

  • Size

    3.0MB

  • Sample

    220516-pxycysbhd9

  • MD5

    17f1f9db7a32c34d97170565322a3e17

  • SHA1

    650c0fad1a913d8fb1cef483e1c1e7d063563890

  • SHA256

    01fe1b52b91c952371a4256d3ccf0b69f66b9c8db2e7a18ae54ea80690e44f8b

  • SHA512

    face32d117c678ec6757a6d77eb312804e61b7a20aa4ab78a30a2ec4089db86732c609f995591a6a05380a6a6433f74143bd46760bde7752e18c70d1bf51c4dd

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      01fe1b52b91c952371a4256d3ccf0b69f66b9c8db2e7a18ae54ea80690e44f8b

    • Size

      3.0MB

    • MD5

      17f1f9db7a32c34d97170565322a3e17

    • SHA1

      650c0fad1a913d8fb1cef483e1c1e7d063563890

    • SHA256

      01fe1b52b91c952371a4256d3ccf0b69f66b9c8db2e7a18ae54ea80690e44f8b

    • SHA512

      face32d117c678ec6757a6d77eb312804e61b7a20aa4ab78a30a2ec4089db86732c609f995591a6a05380a6a6433f74143bd46760bde7752e18c70d1bf51c4dd

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks