Overview

overview

10

Static

static

3

b51b7867d3...49.exe

windows7-x64

10

b51b7867d3...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b51b7867d3d036f0afb8d63eea9cdd49

  • Size

    2.1MB

  • Sample

    240305-tkxm4sag3z

  • MD5

    b51b7867d3d036f0afb8d63eea9cdd49

  • SHA1

    9126ee583f76856d01745c88e8db745d3b9ca078

  • SHA256

    2ab4bfd0136ebba53a74a277364cfc26787a7972fc719479e7a8c481bd0f6b36

  • SHA512

    a36c050ca575bb35bb28133a59f7364dfa8f04c1446b66f7e431b6c2b6463cb20de2a0ce318e06b5f94262997a69b55fe0f819165120dab6493e374fde8534d0

  • SSDEEP

    49152:o4RXiEOUqsiw/JPfp+fL2kN8Cy1FFvdkjdCdGEJSEYQ1:o6yEniwRPhABLy1F9dKdGJ

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      b51b7867d3d036f0afb8d63eea9cdd49

    • Size

      2.1MB

    • MD5

      b51b7867d3d036f0afb8d63eea9cdd49

    • SHA1

      9126ee583f76856d01745c88e8db745d3b9ca078

    • SHA256

      2ab4bfd0136ebba53a74a277364cfc26787a7972fc719479e7a8c481bd0f6b36

    • SHA512

      a36c050ca575bb35bb28133a59f7364dfa8f04c1446b66f7e431b6c2b6463cb20de2a0ce318e06b5f94262997a69b55fe0f819165120dab6493e374fde8534d0

    • SSDEEP

      49152:o4RXiEOUqsiw/JPfp+fL2kN8Cy1FFvdkjdCdGEJSEYQ1:o6yEniwRPhABLy1F9dKdGJ

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks