Overview

overview

10

Static

static

10

NEAS.890a8...30.exe

windows7-x64

10

NEAS.890a8...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.890a8d81cc0d16558242bd492146e830.exe

  • Size

    3.3MB

  • Sample

    231021-z9r2tagg72

  • MD5

    890a8d81cc0d16558242bd492146e830

  • SHA1

    041645c28fab61d0b9046161daf9600512f8dc94

  • SHA256

    bde2aea200f9d2fcb2960d794020dd68547c0c0c056dc3ddd796fc1816d1ef40

  • SHA512

    8ac756f5df57074b414cb0ece0552edf6eec1d846f67715ba5bb967654ebc1424dcf8047e2c70322e6b6ba3aca3796ad43c65930c4bcda37650d4776d8dd19fe

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWB:SbBeSFkN

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      NEAS.890a8d81cc0d16558242bd492146e830.exe

    • Size

      3.3MB

    • MD5

      890a8d81cc0d16558242bd492146e830

    • SHA1

      041645c28fab61d0b9046161daf9600512f8dc94

    • SHA256

      bde2aea200f9d2fcb2960d794020dd68547c0c0c056dc3ddd796fc1816d1ef40

    • SHA512

      8ac756f5df57074b414cb0ece0552edf6eec1d846f67715ba5bb967654ebc1424dcf8047e2c70322e6b6ba3aca3796ad43c65930c4bcda37650d4776d8dd19fe

    • SSDEEP

      98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWB:SbBeSFkN

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks