xmrig

General

Target

7941fe68355bf9acb56bd7934859bd3910afa6e9b3c33e5964bfa38054ddd9c9
Size

3.3MB
Sample

240305-12k4zaah5x
MD5

257ce2c877be07517c8df0e7c70cbb33
SHA1

b853a28f5a8981ef9e4cac713792fc23f3916768
SHA256

7941fe68355bf9acb56bd7934859bd3910afa6e9b3c33e5964bfa38054ddd9c9
SHA512

4fd71fe2b90fc9af889ad89e1f30b8d66d902a605aef72697d33cfe17958fc08718ce27196293e98bee29c63379ef4561523881e5b61953743ff8d0871d82850
SSDEEP

98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4L:NFWPClF7

Score

10^/10

Malware Config

Targets

- Target
  
  7941fe68355bf9acb56bd7934859bd3910afa6e9b3c33e5964bfa38054ddd9c9
- Size
  
  3.3MB
- MD5
  
  257ce2c877be07517c8df0e7c70cbb33
- SHA1
  
  b853a28f5a8981ef9e4cac713792fc23f3916768
- SHA256
  
  7941fe68355bf9acb56bd7934859bd3910afa6e9b3c33e5964bfa38054ddd9c9
- SHA512
  
  4fd71fe2b90fc9af889ad89e1f30b8d66d902a605aef72697d33cfe17958fc08718ce27196293e98bee29c63379ef4561523881e5b61953743ff8d0871d82850
- SSDEEP
  
  98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4L:NFWPClF7
Score

10^/10

xmrig miner upx
- Suspicious use of NtCreateUserProcessOtherParentProcess
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtCreateUserProcessOtherParentProcess

UPX dump on OEP (original entry point)

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2