Overview

overview

10

Static

static

10

630ee88520...a0.exe

windows7-x64

10

630ee88520...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    630ee88520fa7153c635ef0e78e99c01a366e4ef2e8b205d911a4bb4e9fd7ca0

  • Size

    2.6MB

  • Sample

    240312-z15asaah4t

  • MD5

    a0fee34ce2132de64ab6a30ed4947389

  • SHA1

    f712d295e33da3a034b6fd4fe1df811e4d62059f

  • SHA256

    630ee88520fa7153c635ef0e78e99c01a366e4ef2e8b205d911a4bb4e9fd7ca0

  • SHA512

    68992ea1f7686d255b3f873317ff5458321c3412b8e1e66fc8d264d98d6928e721a0f20b44920a59f91a436dac4f7a949ca5b8348934a207c7bd9aec00203117

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEd2KUgKmpKDDuI0:BemTLkNdfE0pZrV56utgh

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      630ee88520fa7153c635ef0e78e99c01a366e4ef2e8b205d911a4bb4e9fd7ca0

    • Size

      2.6MB

    • MD5

      a0fee34ce2132de64ab6a30ed4947389

    • SHA1

      f712d295e33da3a034b6fd4fe1df811e4d62059f

    • SHA256

      630ee88520fa7153c635ef0e78e99c01a366e4ef2e8b205d911a4bb4e9fd7ca0

    • SHA512

      68992ea1f7686d255b3f873317ff5458321c3412b8e1e66fc8d264d98d6928e721a0f20b44920a59f91a436dac4f7a949ca5b8348934a207c7bd9aec00203117

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEd2KUgKmpKDDuI0:BemTLkNdfE0pZrV56utgh

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks