Overview

overview

10

Static

static

10

b3e05f212b...ee.exe

windows7-x64

10

b3e05f212b...ee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

  • Size

    1.2MB

  • Sample

    240308-2dlahaaa7y

  • MD5

    80fa6b10702a76c018c85505d5447040

  • SHA1

    5d47b8118ceba9e17c0bc6e529f1d41f1115dde7

  • SHA256

    b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

  • SHA512

    b566331aa04d8c183e45623d719c8022267d1163f9009d09528e49a43c65a402dbe9a9d2599c13a085c497b22c92e83ae553a89f209d6b13748e5d241a0adbac

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdLqSqIz2WC:Lz071uv4BPMkHC0I6Gz3Lqq2p

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

    • Size

      1.2MB

    • MD5

      80fa6b10702a76c018c85505d5447040

    • SHA1

      5d47b8118ceba9e17c0bc6e529f1d41f1115dde7

    • SHA256

      b3e05f212b26fb241f7a430486e8c96ec4274b9b32e67fd9f8a986b8773616ee

    • SHA512

      b566331aa04d8c183e45623d719c8022267d1163f9009d09528e49a43c65a402dbe9a9d2599c13a085c497b22c92e83ae553a89f209d6b13748e5d241a0adbac

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjuJoz5XdLqSqIz2WC:Lz071uv4BPMkHC0I6Gz3Lqq2p

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks