Overview

overview

10

Static

static

10

00db7c13c1...5f.exe

windows7-x64

10

00db7c13c1...5f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00db7c13c18eea08c95fe3383b04ad143d45bc0e5e3e4571fa8f7ef49c2f7f5f

  • Size

    3.2MB

  • Sample

    240307-vms85sgc65

  • MD5

    ff782048ff6ac2e3caa935bcdefc45cc

  • SHA1

    e7e9383bb55a361c3e8a332be20a49f4323e6ec4

  • SHA256

    00db7c13c18eea08c95fe3383b04ad143d45bc0e5e3e4571fa8f7ef49c2f7f5f

  • SHA512

    b863e9c265373a5cba404ad7d6e6f9159cc2581fc8a719ad36ca84fcca6f43122e49cb0c1006241c28304099268722ef863a565e7bf6b615e4fdcf0e2295dd15

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4C:NFWPClFy

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      00db7c13c18eea08c95fe3383b04ad143d45bc0e5e3e4571fa8f7ef49c2f7f5f

    • Size

      3.2MB

    • MD5

      ff782048ff6ac2e3caa935bcdefc45cc

    • SHA1

      e7e9383bb55a361c3e8a332be20a49f4323e6ec4

    • SHA256

      00db7c13c18eea08c95fe3383b04ad143d45bc0e5e3e4571fa8f7ef49c2f7f5f

    • SHA512

      b863e9c265373a5cba404ad7d6e6f9159cc2581fc8a719ad36ca84fcca6f43122e49cb0c1006241c28304099268722ef863a565e7bf6b615e4fdcf0e2295dd15

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4C:NFWPClFy

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks