Overview

overview

10

Static

static

1

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67ecb32eb01382c71a0ccbb9668552aefc32893d92951bc17220c7056dad7128

  • Size

    4.3MB

  • Sample

    240108-fhjrksbdcl

  • MD5

    563f960105584f0430f32774d17a057f

  • SHA1

    554fd82d279fe6e4a660c01ede00a9df3647da93

  • SHA256

    67ecb32eb01382c71a0ccbb9668552aefc32893d92951bc17220c7056dad7128

  • SHA512

    b500a8d51d5b0eef96063517850c191b3f8b99ed72c16342346868e328f1ca2fbff68a91d11ca74268951a21ba57b8e52d655a8ea88cd63bd173ddc8b0d83b3b

  • SSDEEP

    98304:fOteFv2s5wfn7DGumus8G/Mul2rq/aReDkizMeQUp:fOtgv2Tfn/Gbug/Mul2rVe4iwVUp

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      67ecb32eb01382c71a0ccbb9668552aefc32893d92951bc17220c7056dad7128

    • Size

      4.3MB

    • MD5

      563f960105584f0430f32774d17a057f

    • SHA1

      554fd82d279fe6e4a660c01ede00a9df3647da93

    • SHA256

      67ecb32eb01382c71a0ccbb9668552aefc32893d92951bc17220c7056dad7128

    • SHA512

      b500a8d51d5b0eef96063517850c191b3f8b99ed72c16342346868e328f1ca2fbff68a91d11ca74268951a21ba57b8e52d655a8ea88cd63bd173ddc8b0d83b3b

    • SSDEEP

      98304:fOteFv2s5wfn7DGumus8G/Mul2rq/aReDkizMeQUp:fOtgv2Tfn/Gbug/Mul2rVe4iwVUp

    Score
    10/10
    upxxmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks