Overview

overview

10

Static

static

10

NEAS.af4e2...40.exe

windows7-x64

10

NEAS.af4e2...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.af4e27a6410c2dab4ab0115a06196d40.exe

  • Size

    1.7MB

  • Sample

    231013-zc576sea3y

  • MD5

    af4e27a6410c2dab4ab0115a06196d40

  • SHA1

    d760d142269bd86f764a757e1156b8b69fb5b3e3

  • SHA256

    55e6fac9f9b8c730098da27bb6bec2df8cd06a805b485635d87b584be5fc0d7b

  • SHA512

    b945d1f9dc3b8bc34a31d7a4cddf6abc0b9cadf2502d01850bd6dbd852f0910efb7522aae23d30384b5a50c11a5f015377f77646b03ce3638c1415ecef5491ff

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VxbgSbD8pmuC:Lz071uv4BPMkibTIA5CJvV

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      NEAS.af4e27a6410c2dab4ab0115a06196d40.exe

    • Size

      1.7MB

    • MD5

      af4e27a6410c2dab4ab0115a06196d40

    • SHA1

      d760d142269bd86f764a757e1156b8b69fb5b3e3

    • SHA256

      55e6fac9f9b8c730098da27bb6bec2df8cd06a805b485635d87b584be5fc0d7b

    • SHA512

      b945d1f9dc3b8bc34a31d7a4cddf6abc0b9cadf2502d01850bd6dbd852f0910efb7522aae23d30384b5a50c11a5f015377f77646b03ce3638c1415ecef5491ff

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VxbgSbD8pmuC:Lz071uv4BPMkibTIA5CJvV

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks