Overview

overview

10

Static

static

10

f1f53cf93c...81.exe

windows7-x64

10

f1f53cf93c...81.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

  • Size

    1.2MB

  • Sample

    240311-cbc4nshd39

  • MD5

    0a4f08aea3fb3c7275bd3b0f34fd3b4c

  • SHA1

    51ac1336aa29d69563defd95288551c05ae22086

  • SHA256

    f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

  • SHA512

    ea6167294a271958d4a572998ccf9df278b894e4fc24404f0d75c3df10323f6878042c9010afab39f5720ab34bf1e48dc406d5f8549854469de70187a9cc644a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+Gh+ltl:Lz071uv4BPMkHC0INx29LhG

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

    • Size

      1.2MB

    • MD5

      0a4f08aea3fb3c7275bd3b0f34fd3b4c

    • SHA1

      51ac1336aa29d69563defd95288551c05ae22086

    • SHA256

      f1f53cf93ce30bdb757db87381aec3ebc213cfcef2afb17f280aef414b239481

    • SHA512

      ea6167294a271958d4a572998ccf9df278b894e4fc24404f0d75c3df10323f6878042c9010afab39f5720ab34bf1e48dc406d5f8549854469de70187a9cc644a

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhMgXQP9+Gh+ltl:Lz071uv4BPMkHC0INx29LhG

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks