Overview

overview

10

Static

static

10

4981372aaa...le.exe

windows7-x64

10

4981372aaa...le.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4981372aaa39058cf162853b51a43690_console.exe

  • Size

    3.4MB

  • Sample

    231015-ylq9yahe4w

  • MD5

    4981372aaa39058cf162853b51a43690

  • SHA1

    849de6ce7fe04dc79ac200f9fcd9cb7c69cceeea

  • SHA256

    27885fa507923ead1f82f431c46af5c476ebd20ae55e10cc206694d4a2a211e1

  • SHA512

    af23cb69bf84a8a1f62e91fa5a7ada881120baf2880cca730babb336d7e3dd14bbbc67caf64cf9e5d8347e5fb9e48e93ae24c5a70d9d8360bf5404557eb9a57e

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWX:SbBeSFkD

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      4981372aaa39058cf162853b51a43690_console.exe

    • Size

      3.4MB

    • MD5

      4981372aaa39058cf162853b51a43690

    • SHA1

      849de6ce7fe04dc79ac200f9fcd9cb7c69cceeea

    • SHA256

      27885fa507923ead1f82f431c46af5c476ebd20ae55e10cc206694d4a2a211e1

    • SHA512

      af23cb69bf84a8a1f62e91fa5a7ada881120baf2880cca730babb336d7e3dd14bbbc67caf64cf9e5d8347e5fb9e48e93ae24c5a70d9d8360bf5404557eb9a57e

    • SSDEEP

      98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWX:SbBeSFkD

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks