Overview

overview

10

Static

static

1

miner.exe

windows10-2004-x64

10

Resubmissions

15-03-2023 13:53

230315-q643jafe6v 10

15-03-2023 09:34

230315-lj1pdace58 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    miner.exe

  • Size

    54.5MB

  • Sample

    230315-q643jafe6v

  • MD5

    32e15387bdd65fe68b35718dd1b1b98f

  • SHA1

    d281b428c3d2e59c7d954308301822d9b3aa1409

  • SHA256

    dc2f5e27627750e63f24617303ed5b38841903ff3f32d98c55fe3a36d462064d

  • SHA512

    086b83aa2e1a999c946f3f62389dcb11e8ed76f70a974ba897ddbac9dd1d98a787a96fae3966934a6e3c7360ec50e1f5f73bff160790ef193371d1bb5b2cca38

  • SSDEEP

    786432:B1eGBQ0ZEtS6joZiVoJZmeL0W0SxaH+hnJIa53D7:B1JG0ZEtS68iVoJZmeL0WpX5

Score
10/10
xmrigevasionminerupx

Malware Config

Targets

    • Target

      miner.exe

    • Size

      54.5MB

    • MD5

      32e15387bdd65fe68b35718dd1b1b98f

    • SHA1

      d281b428c3d2e59c7d954308301822d9b3aa1409

    • SHA256

      dc2f5e27627750e63f24617303ed5b38841903ff3f32d98c55fe3a36d462064d

    • SHA512

      086b83aa2e1a999c946f3f62389dcb11e8ed76f70a974ba897ddbac9dd1d98a787a96fae3966934a6e3c7360ec50e1f5f73bff160790ef193371d1bb5b2cca38

    • SSDEEP

      786432:B1eGBQ0ZEtS6joZiVoJZmeL0W0SxaH+hnJIa53D7:B1JG0ZEtS68iVoJZmeL0WpX5

    Score
    10/10
    xmrigevasionminerupx

    • Modifies security service

      evasion

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks