xmrig | 301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

301b856c3f...be.exe

windows7-x64

301b856c3f...be.exe

windows10-2004-x64

Sharing

General

Target

301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe
Size

1.4MB
Sample

240311-y2bjesdb8x
MD5

3ad16a775f9a50170792b872a18d3548
SHA1

32015a91fb9cbd26cfcca1c4d9ec87e8cc6bd4b1
SHA256

301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe
SHA512

ea3923055961e6e147ea78043e567891162a955e6af9e4239731021b2e42f87d2d9b4a9297636d9008285ff97767a16b7837261534572c39557fcb3b125be473
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjhlVI:knw9oUUEEDlGUJ8Y9ctYVk68yI

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

5 signatures

Behavioral task

behavioral1

Sample

301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe.exe

Resource

win7-20240221-en

xmrig miner upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe.exe

Resource

win10v2004-20240226-en

xmrig miner upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe
- Size
  
  1.4MB
- MD5
  
  3ad16a775f9a50170792b872a18d3548
- SHA1
  
  32015a91fb9cbd26cfcca1c4d9ec87e8cc6bd4b1
- SHA256
  
  301b856c3f63333148eb53a5e2d618f528a207e0ff4e274caf5b3ee2d94faebe
- SHA512
  
  ea3923055961e6e147ea78043e567891162a955e6af9e4239731021b2e42f87d2d9b4a9297636d9008285ff97767a16b7837261534572c39557fcb3b125be473
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjhlVI:knw9oUUEEDlGUJ8Y9ctYVk68yI
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy