Overview

overview

10

Static

static

10

89cdcd76b1...4a.exe

windows7-x64

10

89cdcd76b1...4a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

  • Size

    1.3MB

  • Sample

    240308-zmllhsgf9v

  • MD5

    f1cfee43fb838f788311f7b3c9b12123

  • SHA1

    91ff89d62abc2ae7377194ef2b6f9366069d6d29

  • SHA256

    89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

  • SHA512

    a1650ceeb8343f0097adbe8c822e0f2c764ffb6f18b67d0b150e050fa8d978b138fc610dc59512ae67bc9cf1506deaa55e1f3b2ae845505cf69c47d09e58bdb3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqa7MZt+XRK4FgNyhvGXgYc:knw9oUUEEDl37jcqa7V/gwQnc

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

    • Size

      1.3MB

    • MD5

      f1cfee43fb838f788311f7b3c9b12123

    • SHA1

      91ff89d62abc2ae7377194ef2b6f9366069d6d29

    • SHA256

      89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

    • SHA512

      a1650ceeb8343f0097adbe8c822e0f2c764ffb6f18b67d0b150e050fa8d978b138fc610dc59512ae67bc9cf1506deaa55e1f3b2ae845505cf69c47d09e58bdb3

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqa7MZt+XRK4FgNyhvGXgYc:knw9oUUEEDl37jcqa7V/gwQnc

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks