Overview

overview

10

Static

static

10

0960ef0966...39.exe

windows7-x64

10

0960ef0966...39.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0960ef09662b0b1c0312eefcb3e734e64d32209bc57fb03976fbb2c2f89d8d39

  • Size

    1.3MB

  • Sample

    240307-vzelhsgf73

  • MD5

    c8ce9c47ac1ec133385f32422a21b760

  • SHA1

    43504f76c57071f2a2453a1c9f86e520dcc4422d

  • SHA256

    0960ef09662b0b1c0312eefcb3e734e64d32209bc57fb03976fbb2c2f89d8d39

  • SHA512

    838a35a874f59b39e046594aedbb137699e83952259b528f31594e54a07fc1f76fa3e8ed0e75cbdb558da0ecb8f8136307b573eedfd9b4add71b39db53ec824f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLtdAy7Tez3:knw9oUUEEDl37jcqDrUS1gfT

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0960ef09662b0b1c0312eefcb3e734e64d32209bc57fb03976fbb2c2f89d8d39

    • Size

      1.3MB

    • MD5

      c8ce9c47ac1ec133385f32422a21b760

    • SHA1

      43504f76c57071f2a2453a1c9f86e520dcc4422d

    • SHA256

      0960ef09662b0b1c0312eefcb3e734e64d32209bc57fb03976fbb2c2f89d8d39

    • SHA512

      838a35a874f59b39e046594aedbb137699e83952259b528f31594e54a07fc1f76fa3e8ed0e75cbdb558da0ecb8f8136307b573eedfd9b4add71b39db53ec824f

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLtdAy7Tez3:knw9oUUEEDl37jcqDrUS1gfT

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks