xmrig | 95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

95cf738821...0b.exe

windows7-x64

95cf738821...0b.exe

windows10-2004-x64

Sharing

General

Target

95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b
Size

3.1MB
Sample

231114-xh927sdb87
MD5

bb62a4eaed37b600497f1b22840f0de0
SHA1

e0d62939222ddd8ed3435103588b7f9513a9911d
SHA256

95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b
SHA512

584867af21b7d126215ab2792e1f85c68f3eeb60de4100c2bcd972491598ee42b49cbfecadefe4056068fe0161fe8357c06333a2228188217fa2e06d86e05b93
SSDEEP

49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5O1x5WP:NABn

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b.exe

Resource

win7-20231023-en

xmrig miner upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b.exe

Resource

win10v2004-20231020-en

xmrig miner upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b
- Size
  
  3.1MB
- MD5
  
  bb62a4eaed37b600497f1b22840f0de0
- SHA1
  
  e0d62939222ddd8ed3435103588b7f9513a9911d
- SHA256
  
  95cf7388218ab98ce769ed181e9e1ae237da399f9638c10fac9c32d166254d0b
- SHA512
  
  584867af21b7d126215ab2792e1f85c68f3eeb60de4100c2bcd972491598ee42b49cbfecadefe4056068fe0161fe8357c06333a2228188217fa2e06d86e05b93
- SSDEEP
  
  49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5O1x5WP:NABn
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.