Overview

overview

10

Static

static

ddc80d32cf...f7.exe

windows7_x64

10

ddc80d32cf...f7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddc80d32cf7a231befcc58230707f111a47c6825a98f43dd2fb3edc4d142e0f7

  • Size

    1.1MB

  • Sample

    220521-mh7xqsfaap

  • MD5

    0c218ef7f1dd22804e307ce6b9965e2f

  • SHA1

    63500daa7edee18a57d6ac649a6743e95591d591

  • SHA256

    ddc80d32cf7a231befcc58230707f111a47c6825a98f43dd2fb3edc4d142e0f7

  • SHA512

    5ee16ee9c3cd397da493bb3f87aead7ee0b9bf3d6274d71ae0be6902d83242a7080821371d44b2a5ac06ec66c1a2037a4763dfc9f1b853a330f3fe2ba9138e4e

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      ddc80d32cf7a231befcc58230707f111a47c6825a98f43dd2fb3edc4d142e0f7

    • Size

      1.1MB

    • MD5

      0c218ef7f1dd22804e307ce6b9965e2f

    • SHA1

      63500daa7edee18a57d6ac649a6743e95591d591

    • SHA256

      ddc80d32cf7a231befcc58230707f111a47c6825a98f43dd2fb3edc4d142e0f7

    • SHA512

      5ee16ee9c3cd397da493bb3f87aead7ee0b9bf3d6274d71ae0be6902d83242a7080821371d44b2a5ac06ec66c1a2037a4763dfc9f1b853a330f3fe2ba9138e4e

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner Payload

      miner

    • Executes dropped EXE

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks