Overview

overview

10

Static

static

10

a1a69bfb91...24.exe

windows7-x64

10

a1a69bfb91...24.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1a69bfb91463389a53d36a32566a041f768304f26226029166bec975cc0fb24

  • Size

    2.6MB

  • Sample

    240312-3ezpysga23

  • MD5

    047daa4ec2302dcee526eba9af3c6e9d

  • SHA1

    8ce21d224854dd159bf86d3e6e70bcf75585f95c

  • SHA256

    a1a69bfb91463389a53d36a32566a041f768304f26226029166bec975cc0fb24

  • SHA512

    f210fab964210270b8159c1e75c5a9a8d35285eefccbabd9fc5c9c0cf00b9d3b0965b2742eef72bc33e3b4ad3548d1c6ba85c04cbe922492330c98dce19b7bd8

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJc5cMK2978W:N0GnJMOWPClFdx6e0EALKWVTffZiPAcv

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      a1a69bfb91463389a53d36a32566a041f768304f26226029166bec975cc0fb24

    • Size

      2.6MB

    • MD5

      047daa4ec2302dcee526eba9af3c6e9d

    • SHA1

      8ce21d224854dd159bf86d3e6e70bcf75585f95c

    • SHA256

      a1a69bfb91463389a53d36a32566a041f768304f26226029166bec975cc0fb24

    • SHA512

      f210fab964210270b8159c1e75c5a9a8d35285eefccbabd9fc5c9c0cf00b9d3b0965b2742eef72bc33e3b4ad3548d1c6ba85c04cbe922492330c98dce19b7bd8

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJc5cMK2978W:N0GnJMOWPClFdx6e0EALKWVTffZiPAcv

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks