Overview

overview

10

Static

static

3

1e97aba3be...a2.exe

windows7-x64

10

1e97aba3be...a2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e97aba3bea70cedc575c7a181f1782ba7d8a3bd5859960bd46ea3a0663a95a2.exe

  • Size

    2.5MB

  • Sample

    240212-ddyzlaad7v

  • MD5

    e9adf3fcd6efd04ad2d9fcbb0c652a5d

  • SHA1

    bfe3f7167266c6e17572e801394517513d4b7501

  • SHA256

    1e97aba3bea70cedc575c7a181f1782ba7d8a3bd5859960bd46ea3a0663a95a2

  • SHA512

    6e0be0d272eea1ca92ea164549b0a4c26f7a89ecdbc85c6998a278eb961c406e43964eb13cd3d573fe063aeb64e8d38a984cee8706747f82610a56a716c0b255

  • SSDEEP

    49152:gIKFUNRNKPOYWuqQL6Z7uwfR7bMFjTrt244RMq30x10mtN2R/DHqajWwPCXbiD:gI2UN7Km8AqQs7g442I0x10mtNgHjWwN

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      1e97aba3bea70cedc575c7a181f1782ba7d8a3bd5859960bd46ea3a0663a95a2.exe

    • Size

      2.5MB

    • MD5

      e9adf3fcd6efd04ad2d9fcbb0c652a5d

    • SHA1

      bfe3f7167266c6e17572e801394517513d4b7501

    • SHA256

      1e97aba3bea70cedc575c7a181f1782ba7d8a3bd5859960bd46ea3a0663a95a2

    • SHA512

      6e0be0d272eea1ca92ea164549b0a4c26f7a89ecdbc85c6998a278eb961c406e43964eb13cd3d573fe063aeb64e8d38a984cee8706747f82610a56a716c0b255

    • SSDEEP

      49152:gIKFUNRNKPOYWuqQL6Z7uwfR7bMFjTrt244RMq30x10mtN2R/DHqajWwPCXbiD:gI2UN7Km8AqQs7g442I0x10mtNgHjWwN

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks