Overview

overview

10

Static

static

winprofile

windows7-x64

1

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e79572b925992e2c01e4e47c83a2d3796cb2fab7eb716d146f4551ecb5e95024

  • Size

    71KB

  • Sample

    220924-2bwy8acce5

  • MD5

    1a9a8f5167110e1fbc55ab294d1ce876

  • SHA1

    3c3ea653a37eff8b2b4214a4c6ecca3de5f33e99

  • SHA256

    e79572b925992e2c01e4e47c83a2d3796cb2fab7eb716d146f4551ecb5e95024

  • SHA512

    7ec52829af747146fe1fbc74e15d0919687a3a08f0b6e3371a8c0ba446373a1748883d4452702a65f32f2740a4167eed1b18e11fa8c900fec7255e47356dd277

  • SSDEEP

    768:FpaTRtS/y3YNYHFqJe4cplUf3/281s8TnJbR8YcdX2t3Ux4sbDZ+kAwl0dBKvl:+TmkDlqJJcc281s8dbRxZpGDb1HAwr9

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      e79572b925992e2c01e4e47c83a2d3796cb2fab7eb716d146f4551ecb5e95024

    • Size

      71KB

    • MD5

      1a9a8f5167110e1fbc55ab294d1ce876

    • SHA1

      3c3ea653a37eff8b2b4214a4c6ecca3de5f33e99

    • SHA256

      e79572b925992e2c01e4e47c83a2d3796cb2fab7eb716d146f4551ecb5e95024

    • SHA512

      7ec52829af747146fe1fbc74e15d0919687a3a08f0b6e3371a8c0ba446373a1748883d4452702a65f32f2740a4167eed1b18e11fa8c900fec7255e47356dd277

    • SSDEEP

      768:FpaTRtS/y3YNYHFqJe4cplUf3/281s8TnJbR8YcdX2t3Ux4sbDZ+kAwl0dBKvl:+TmkDlqJJcc281s8dbRxZpGDb1HAwr9

    Score
    10/10
    xmrigminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks