Overview

overview

10

Static

static

10

WinRing0x64.exe

windows7_x64

WinRing0x64.exe

windows10-2004_x64

Windows Up...ce.exe

windows7_x64

10

Windows Up...ce.exe

windows10-2004_x64

1

concrt140.dll

windows7_x64

1

concrt140.dll

windows10-2004_x64

3

msvcp140.dll

windows7_x64

3

msvcp140.dll

windows10-2004_x64

3

msvcp140_1.dll

windows7_x64

1

msvcp140_1.dll

windows10-2004_x64

1

msvcp140_2.dll

windows7_x64

1

msvcp140_2.dll

windows10-2004_x64

1

msvcp140_c...ds.dll

windows7_x64

3

msvcp140_c...ds.dll

windows10-2004_x64

3

vccorlib140.dll

windows7_x64

1

vccorlib140.dll

windows10-2004_x64

3

vcpruntime120.dll

windows7_x64

3

vcpruntime120.dll

windows10-2004_x64

1

vcruntime140.dll

windows7_x64

3

vcruntime140.dll

windows10-2004_x64

3

vcruntime140_1.dll

windows7_x64

3

vcruntime140_1.dll

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5b526b4b8c2d4396a91d7daf5f5fe804538c001087d8c4b32e01899b396b6b3

  • Size

    2.0MB

  • Sample

    220520-fs5rssbbh3

  • MD5

    3cb320e0fd8d699bea810100e118ddc3

  • SHA1

    b241e489452568d15cb4672f2108a63dfda75201

  • SHA256

    b5b526b4b8c2d4396a91d7daf5f5fe804538c001087d8c4b32e01899b396b6b3

  • SHA512

    2288cc4c6f6d870cdfbfc2e483d65f045acb19796c7baf8cc064699cafb1d98f41f4f75fb7bd681210da081eeb9a7f20e96c867a140fc210d2afa3023352e8de

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      WinRing0x64.sys

    • Size

      14KB

    • MD5

      0c0195c48b6b8582fa6f6373032118da

    • SHA1

      d25340ae8e92a6d29f599fef426a2bc1b5217299

    • SHA256

      11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    • SHA512

      ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

    Score
    1/10
    behavioral1behavioral2

    • Target

      Windows Update Service.exe

    • Size

      5KB

    • MD5

      084b7cfbd33d651eb91b5e739b7b7273

    • SHA1

      f4a0b3e186d47cf337181bc43dc0dcf1b3aeda4c

    • SHA256

      0513879a40c9116c6ff959bbec11c2aa45ecfb9324d912fcd061ace056c9ece8

    • SHA512

      7807be70fd20a1ba99d8d8956e736e4326bd6c3da770f6004e9e8ac84b7b725062992da700c8e78ddeed481dbb312d8cbcb73beae8ad055ce69e7d135c450580

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner Payload

      miner
    behavioral3behavioral4

    • Target

      concrt140.dll

    • Size

      309KB

    • MD5

      f3c9f61b9e1b25c9de8d817d3d1c02d7

    • SHA1

      dab244ac19c66bb5a7bae0aee6e3ea280c30f364

    • SHA256

      1f072a6dc98cd882c542208e7a8fe4fbe5239781588f17c005a2607fdfe62d5d

    • SHA512

      8a6cf1e91a15b5a1db52880258f3a39f6cc3bed72e79598f7a10661dd9ed28d369499f585225eb016a2f0b7eddade096ba80083db301b68deb173fadde3b9619

    Score
    3/10
    behavioral5behavioral6

    • Target

      msvcp140.dll

    • Size

      576KB

    • MD5

      01b946a2edc5cc166de018dbb754b69c

    • SHA1

      dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46

    • SHA256

      88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5

    • SHA512

      65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5

    Score
    3/10
    behavioral7behavioral8

    • Target

      msvcp140_1.dll

    • Size

      30KB

    • MD5

      0fe6d52eb94c848fe258dc0ec9ff4c11

    • SHA1

      95cc74c64ab80785f3893d61a73b8a958d24da29

    • SHA256

      446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f

    • SHA512

      c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86

    Score
    1/10
    behavioral9behavioral10

    • Target

      msvcp140_2.dll

    • Size

      188KB

    • MD5

      9002e0bee6455b2322e3e717fe25f9be

    • SHA1

      bc8df83cc657f0f46a0bff20565870a435ed1563

    • SHA256

      24b47c966b6e4a65b3e4df866d347d3427e9bd709be550c38224427eb5e143d3

    • SHA512

      28ddd087b48d5aa96ec39ccc29a4020cf75ae3c5cb6af9a9571694d73f7aaa4fecb15336c9c7a7d12c93d8bf12efa4fe4d8d612cd93d72c72130cae52317d0d9

    Score
    1/10
    behavioral11behavioral12

    • Target

      msvcp140_codecvt_ids.dll

    • Size

      26KB

    • MD5

      df62e520457181f680a05aa1938ad102

    • SHA1

      7005e0efda58a0860b290d82bea32ee5eb6c6e51

    • SHA256

      92a13ba41b543a5915e79a05a630bbb28c4c90e59bc02c761dc1fd4329c23a9a

    • SHA512

      80073b0cacb5adb1588ce7c8aefdc9ced3a341f7d80fdf92def3baa550114dd381ca435bdfe28d43a6b2ccc4ce2fbed8a4e8e860c7606b75d14fc416191923f9

    Score
    3/10
    behavioral13behavioral14

    • Target

      vccorlib140.dll

    • Size

      329KB

    • MD5

      07907b0fe230247ded78493e97184f0a

    • SHA1

      8fa0325c578dfa575e352499ed237cbcb7ee74aa

    • SHA256

      9eb1ee3baef268410f3443a888a63de38fb3e47792108eaf5025684f8d308b88

    • SHA512

      3c090aebaed23346172b47ac318d36785d577d980db6dcaca85dcceac209b8421488bbbfeaa2a25c2c0c1ba4ae00aa1174f3da75e2a9891aae5406d4363a256f

    Score
    3/10
    behavioral15behavioral16

    • Target

      vcpruntime120.dll

    • Size

      3.1MB

    • MD5

      1518a1f00015502c2b5631f12336a48f

    • SHA1

      9a2fdc1e799e32e51b4e28c2e75a9f0aa50d6fc6

    • SHA256

      d7e4e70989b0a40cb720900c7bea1a9f76a7cbcc4184613a05d8db7af399c802

    • SHA512

      c1157123853949b78be71f0b2fbfc5db8eeaab3ec810b7c779de991007523ffa2537034592ba0244da837a25c3cebe4430336b0d47e06925ce0012aed6c99366

    Score
    3/10
    behavioral17behavioral18

    • Target

      vcruntime140.dll

    • Size

      99KB

    • MD5

      971dbbe854fc6ab78c095607dfad7b5c

    • SHA1

      1731fb947cd85f9017a95fda1dc5e3b0f6b42ca2

    • SHA256

      5e197a086b6a7711baa09afe4ea7c68f0e777b2ff33f1df25a21f375b7d9693a

    • SHA512

      b966aab9c0d9459fada3e5e96998292d6874a7078924ea2c171f0a1a50b0784c24cc408d00852bec48d6a01e67e41d017684631176d3e90151ec692161f1814d

    Score
    3/10
    behavioral19behavioral20

    • Target

      vcruntime140_1.dll

    • Size

      43KB

    • MD5

      6bc084255a5e9eb8df2bcd75b4cd0777

    • SHA1

      cf071ad4e512cd934028f005cabe06384a3954b6

    • SHA256

      1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460

    • SHA512

      b822538494d13bda947655af791fed4daa811f20c4b63a45246c8f3befa3ec37ff1aa79246c89174fe35d76ffb636fa228afa4bda0bd6d2c41d01228b151fd89

    Score
    3/10
    behavioral21behavioral22

MITRE ATT&CK Matrix

Tasks