Description
XMRig is a high performance, open source, cross platform CPU/GPU miner.
a738f6016086abdd2824b797ec67feee3bc39d52b0b0ae94bd1384c58ed3d5d6
General
Target
Size
Sample
a738f6016086abdd2824b797ec67feee3bc39d52b0b0ae94bd1384c58ed3d5d6
4MB
220520-f1h8rsbef7
Score
10 /10
MD5
SHA1
SHA256
SHA512
b4aa27a1339c69d99121a4fe4fac94f7
72cd9ebfd59e9c5a45c22dd5f6aa8d4cb9ba9d26
a738f6016086abdd2824b797ec67feee3bc39d52b0b0ae94bd1384c58ed3d5d6
3550565464695370bdc761327eea1502e523a8b5f5780c6d7942e2be480d40a262897009c6e459110ac0b146ad05f69f9c7d099ad88eaca39975907f95d3e184
Malware Config
Targets
Target
MD5
Filesize
a738f6016086abdd2824b797ec67feee3bc39d52b0b0ae94bd1384c58ed3d5d6
b4aa27a1339c69d99121a4fe4fac94f7
4MB
Score
10/10
SHA1
SHA256
SHA512
72cd9ebfd59e9c5a45c22dd5f6aa8d4cb9ba9d26
a738f6016086abdd2824b797ec67feee3bc39d52b0b0ae94bd1384c58ed3d5d6
3550565464695370bdc761327eea1502e523a8b5f5780c6d7942e2be480d40a262897009c6e459110ac0b146ad05f69f9c7d099ad88eaca39975907f95d3e184
Tags
Signatures
-
xmrig
-
XMRig Miner Payload
Tags
-
Executes dropped EXE
-
UPX packed file
Description
Detects executables packed with UPX/modified UPX open source packer.
Tags
-
Checks computer location settings
Description
Looks up country code configured in the registry, likely geofence.
TTPs
-
Legitimate hosting services abused for malware hosting/C2
TTPs
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks