Overview

overview

10

Static

static

10

HEUR-Troja...er.exe

windows7-x64

10

HEUR-Troja...er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Miner.pef-ce50151acdf15341df257e5ef4a7566afcbc2344ac28ab9bb1872a554779368e

  • Size

    3.0MB

  • Sample

    240229-j9nfmabe94

  • MD5

    ec8caf7ef53151e4c7f4a26059ac7dc3

  • SHA1

    37f14b13bba6019e1d5f400a174640bd3cc9d152

  • SHA256

    ce50151acdf15341df257e5ef4a7566afcbc2344ac28ab9bb1872a554779368e

  • SHA512

    e427e525fccc80e1579493bb07070756b591ad83e9534721257934eca1a8079572c7466d7330717bce5984a9ea93460de7a159550e721cb85d48d9da8dbd3a8a

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9c87MQUnZD:N0GnJMOWPClFdx6e0EALKWVTffZiPAc/

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      HEUR-Trojan.Win32.Miner.pef-ce50151acdf15341df257e5ef4a7566afcbc2344ac28ab9bb1872a554779368e

    • Size

      3.0MB

    • MD5

      ec8caf7ef53151e4c7f4a26059ac7dc3

    • SHA1

      37f14b13bba6019e1d5f400a174640bd3cc9d152

    • SHA256

      ce50151acdf15341df257e5ef4a7566afcbc2344ac28ab9bb1872a554779368e

    • SHA512

      e427e525fccc80e1579493bb07070756b591ad83e9534721257934eca1a8079572c7466d7330717bce5984a9ea93460de7a159550e721cb85d48d9da8dbd3a8a

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9c87MQUnZD:N0GnJMOWPClFdx6e0EALKWVTffZiPAc/

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks