Overview

overview

10

Static

static

10

NEAS.fce88...50.exe

windows7-x64

10

NEAS.fce88...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fce88e8ab371ded2302b0eefbd57fc50.exe

  • Size

    1.7MB

  • Sample

    231115-ff1bjsdf71

  • MD5

    fce88e8ab371ded2302b0eefbd57fc50

  • SHA1

    6f54ac91987c5f869dffd07a69e3a0b8a4b9279d

  • SHA256

    7280d2d771807c1d1dc69aa9184a3c0a8fb9a80ea0ff9aea3fba7e067ba4e655

  • SHA512

    0b1f92d7e993c4a4dacdf3a4da3524d9ee8b352315be520c1d6bf68cbd136f422014e2b17586a1212fcb8fa8e23252b92f35b2a4bb1ec5e2f069425b7ebc3bb7

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SIY:NABW

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      NEAS.fce88e8ab371ded2302b0eefbd57fc50.exe

    • Size

      1.7MB

    • MD5

      fce88e8ab371ded2302b0eefbd57fc50

    • SHA1

      6f54ac91987c5f869dffd07a69e3a0b8a4b9279d

    • SHA256

      7280d2d771807c1d1dc69aa9184a3c0a8fb9a80ea0ff9aea3fba7e067ba4e655

    • SHA512

      0b1f92d7e993c4a4dacdf3a4da3524d9ee8b352315be520c1d6bf68cbd136f422014e2b17586a1212fcb8fa8e23252b92f35b2a4bb1ec5e2f069425b7ebc3bb7

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SIY:NABW

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks