Overview

overview

10

Static

static

1

Monero3070...xe.exe

windows7-x64

10

Monero3070...xe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Monero30705edgeexe.exe

  • Size

    2.6MB

  • Sample

    240111-y88gqsgacl

  • MD5

    8665ea7a297abe90559362460f2ce3a0

  • SHA1

    db51d44010a656007628472533c1f052f2aec3e6

  • SHA256

    530d34800b671af8c4164660fb50475fb55acc031c93cd17213c24b4e132efbb

  • SHA512

    55f6ad6d89f314436b169210a2534021d941f1fcd27d58a92a464c8d268fba4d765173aa21c95dedd1cf17c80f79e71de142d98fd0955ed8f9bb5906c9f6c033

  • SSDEEP

    49152:b0oOoSqywDNmGUTCqP3XLn8eN0a2a8JAclbN7rIHIiY5lM3AW6leD8gxf5C73hr3:vOoSqywIaqP378eN0ZAclbN7rIHIRlMg

Score
10/10
xmrigevasionminerpersistenceupx

Malware Config

Targets

    • Target

      Monero30705edgeexe.exe

    • Size

      2.6MB

    • MD5

      8665ea7a297abe90559362460f2ce3a0

    • SHA1

      db51d44010a656007628472533c1f052f2aec3e6

    • SHA256

      530d34800b671af8c4164660fb50475fb55acc031c93cd17213c24b4e132efbb

    • SHA512

      55f6ad6d89f314436b169210a2534021d941f1fcd27d58a92a464c8d268fba4d765173aa21c95dedd1cf17c80f79e71de142d98fd0955ed8f9bb5906c9f6c033

    • SSDEEP

      49152:b0oOoSqywDNmGUTCqP3XLn8eN0a2a8JAclbN7rIHIiY5lM3AW6leD8gxf5C73hr3:vOoSqywIaqP378eN0ZAclbN7rIHIRlMg

    Score
    10/10
    xmrigevasionminerpersistenceupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistence

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks