Overview

overview

10

Static

static

10

NEAS.54a58...f0.exe

windows7-x64

10

NEAS.54a58...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.54a58646e1a3ba08c17f179945f8a9f0.exe

  • Size

    1.5MB

  • Sample

    231112-3av6zade8w

  • MD5

    54a58646e1a3ba08c17f179945f8a9f0

  • SHA1

    2de0a7aec478b287ae8db64354b76c72444752c4

  • SHA256

    262c95817e2c084ea9ee18dedeab3a8419902c391d3ca702038b684325563134

  • SHA512

    050afdbba1befd0c45e536c8f5cc84ecf3c0cc8522c36a2af74e6af9ebf52d131abd9fed5fac25cf139add839ede77e9bf66a469df9d4801b24b4fff20f02748

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIXIqndvawwDxJ:BemTLkNdfE0pZry

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      NEAS.54a58646e1a3ba08c17f179945f8a9f0.exe

    • Size

      1.5MB

    • MD5

      54a58646e1a3ba08c17f179945f8a9f0

    • SHA1

      2de0a7aec478b287ae8db64354b76c72444752c4

    • SHA256

      262c95817e2c084ea9ee18dedeab3a8419902c391d3ca702038b684325563134

    • SHA512

      050afdbba1befd0c45e536c8f5cc84ecf3c0cc8522c36a2af74e6af9ebf52d131abd9fed5fac25cf139add839ede77e9bf66a469df9d4801b24b4fff20f02748

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIXIqndvawwDxJ:BemTLkNdfE0pZry

    Score
    10/10
    xmrigminerupx

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks