Overview

overview

10

Static

static

1

winprofile

windows7-x64

1

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aed12441b21e0a66daf973c963030659f30193bebe39ba83bf816888cd76f230

  • Size

    63KB

  • Sample

    230314-fvey6ade68

  • MD5

    12fb0f015c25e58175b863e9488ff8fd

  • SHA1

    2c685241baa21c209f683087720615c803682a4b

  • SHA256

    aed12441b21e0a66daf973c963030659f30193bebe39ba83bf816888cd76f230

  • SHA512

    144c310b1635770bd95f17017357e23c98191828bd3543b4f94a8cd2dc514d516d770d32e65dc44f394c714e52081e7cc53679280ef460f5e03a01f971df6a8d

  • SSDEEP

    768:XnV24kDJJdtVCHCJF+rA6ChXLCQfBYOMbEJtzAMZ0cz+qDZ0Z7ZS13CLRKt:XnkvZCiGrA6ChXmGBVMbEbsm9G7ZmkA

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      aed12441b21e0a66daf973c963030659f30193bebe39ba83bf816888cd76f230

    • Size

      63KB

    • MD5

      12fb0f015c25e58175b863e9488ff8fd

    • SHA1

      2c685241baa21c209f683087720615c803682a4b

    • SHA256

      aed12441b21e0a66daf973c963030659f30193bebe39ba83bf816888cd76f230

    • SHA512

      144c310b1635770bd95f17017357e23c98191828bd3543b4f94a8cd2dc514d516d770d32e65dc44f394c714e52081e7cc53679280ef460f5e03a01f971df6a8d

    • SSDEEP

      768:XnV24kDJJdtVCHCJF+rA6ChXLCQfBYOMbEJtzAMZ0cz+qDZ0Z7ZS13CLRKt:XnkvZCiGrA6ChXmGBVMbEbsm9G7ZmkA

    Score
    10/10
    xmrigminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks