Overview

overview

10

Static

static

3

60396d247d...6a.exe

windows7-x64

10

60396d247d...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    60396d247dfaabf972886d2ce21ea36a

  • Size

    45KB

  • Sample

    231226-khpeaaaean

  • MD5

    60396d247dfaabf972886d2ce21ea36a

  • SHA1

    e8d12a9c5b5052174c2da49a894f7d1dff632e2f

  • SHA256

    71738fa14048ec5a7bec852fb4551f35d49cb790f6ea390e8308cfc8a5fa91c6

  • SHA512

    23c39d432572389287b53e9383e70b40fd2b7f6eeee36a46a79201ce3d0b5d98b1b33510ee4696fc5b0fccbe22a9d066a256a9c0c407ea48716066aae4891f3b

  • SSDEEP

    768:GC9qgMBtfGBLpu5mA92qPesOjQxBmo960hW9gmw4QkvOeMTYF9RcUIgliZ:GCjMrfSUmA9TPeaxBZ6z+pkvD7F9R3QZ

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      60396d247dfaabf972886d2ce21ea36a

    • Size

      45KB

    • MD5

      60396d247dfaabf972886d2ce21ea36a

    • SHA1

      e8d12a9c5b5052174c2da49a894f7d1dff632e2f

    • SHA256

      71738fa14048ec5a7bec852fb4551f35d49cb790f6ea390e8308cfc8a5fa91c6

    • SHA512

      23c39d432572389287b53e9383e70b40fd2b7f6eeee36a46a79201ce3d0b5d98b1b33510ee4696fc5b0fccbe22a9d066a256a9c0c407ea48716066aae4891f3b

    • SSDEEP

      768:GC9qgMBtfGBLpu5mA92qPesOjQxBmo960hW9gmw4QkvOeMTYF9RcUIgliZ:GCjMrfSUmA9TPeaxBZ6z+pkvD7F9R3QZ

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks