Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    2.5MB

  • Sample

    240203-yb7tyagge2

  • MD5

    38c0b2afe8b84b4efdb667c28a8b1e7a

  • SHA1

    9280a53dac98d2076398e1d40d185232d456d3b3

  • SHA256

    9151e8f43f29772128e76d48d2cb94a7ad1bd114bf554c47309396a7b1d14e47

  • SHA512

    238a03bdcfde97f86d1494436e856f4ec1aa5299e09be8aff207566deb280c9c516581651bd1d0b5808c7049a43227a368341e646c455f8b361e0d1c0946ea09

  • SSDEEP

    49152:FjLWoR4/RmuZ7KVMxGBJCf0fXyhErbWrZJHsfoGqepCEEbHkN2:JLWS4/RmGK6wzCf0yErb2ZJHYoGqep7j

Score
10/10
xmrigevasionminerpersistenceupx

Malware Config

Targets

    • Target

      file

    • Size

      2.5MB

    • MD5

      38c0b2afe8b84b4efdb667c28a8b1e7a

    • SHA1

      9280a53dac98d2076398e1d40d185232d456d3b3

    • SHA256

      9151e8f43f29772128e76d48d2cb94a7ad1bd114bf554c47309396a7b1d14e47

    • SHA512

      238a03bdcfde97f86d1494436e856f4ec1aa5299e09be8aff207566deb280c9c516581651bd1d0b5808c7049a43227a368341e646c455f8b361e0d1c0946ea09

    • SSDEEP

      49152:FjLWoR4/RmuZ7KVMxGBJCf0fXyhErbWrZJHsfoGqepCEEbHkN2:JLWS4/RmGK6wzCf0yErb2ZJHYoGqep7j

    Score
    10/10
    xmrigevasionminerpersistenceupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistence

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks