Overview

overview

10

Static

static

1

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf51c50c01a1f91fd1dfbb0a4742ff9aad69417f0a7a95be0bb64d855b0dd5d9

  • Size

    4.2MB

  • Sample

    240107-2d1eesged2

  • MD5

    d6af79c29645eab72cbe21a3a5a118db

  • SHA1

    280950ed79e57afd2f6e1d6dd677ade37ca9d75a

  • SHA256

    cf51c50c01a1f91fd1dfbb0a4742ff9aad69417f0a7a95be0bb64d855b0dd5d9

  • SHA512

    7c9e801a5385e499882f46ec3bff42fcddb1926819781ce1f8120637bf7da444b0f4b4188650b12282cb24f39c30b02a5bbfd8a1566906cd05a14768a1d7b413

  • SSDEEP

    98304:y1W9Kp+CladnYS2dru3SkG/Mul2rq/aReDkizMeQU90:yuKp+VfvQ/Mul2rVe4iwVU90

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      cf51c50c01a1f91fd1dfbb0a4742ff9aad69417f0a7a95be0bb64d855b0dd5d9

    • Size

      4.2MB

    • MD5

      d6af79c29645eab72cbe21a3a5a118db

    • SHA1

      280950ed79e57afd2f6e1d6dd677ade37ca9d75a

    • SHA256

      cf51c50c01a1f91fd1dfbb0a4742ff9aad69417f0a7a95be0bb64d855b0dd5d9

    • SHA512

      7c9e801a5385e499882f46ec3bff42fcddb1926819781ce1f8120637bf7da444b0f4b4188650b12282cb24f39c30b02a5bbfd8a1566906cd05a14768a1d7b413

    • SSDEEP

      98304:y1W9Kp+CladnYS2dru3SkG/Mul2rq/aReDkizMeQU90:yuKp+VfvQ/Mul2rVe4iwVU90

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks