Overview

overview

10

Static

static

10

a22fafd8f7...f2.exe

windows7-x64

10

a22fafd8f7...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a22fafd8f700483b33ffdba9549f00f0290080d61a4195fb4180f596cb0e42f2

  • Size

    3.2MB

  • Sample

    240315-2dh55sed49

  • MD5

    b8c6063e198879baa37df5393981a5fc

  • SHA1

    630e08fb63f960cec4faa3987ed9b44605f9991e

  • SHA256

    a22fafd8f700483b33ffdba9549f00f0290080d61a4195fb4180f596cb0e42f2

  • SHA512

    3c281dc2b168e7d881c11b092f1d0f2ce7371e413a082d6e948e37053a89e0f3f4764d4f3300551b04b53622634ddddae6c107879d8769bf5712873ac8741c1f

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc400:NFWPClFk0

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      a22fafd8f700483b33ffdba9549f00f0290080d61a4195fb4180f596cb0e42f2

    • Size

      3.2MB

    • MD5

      b8c6063e198879baa37df5393981a5fc

    • SHA1

      630e08fb63f960cec4faa3987ed9b44605f9991e

    • SHA256

      a22fafd8f700483b33ffdba9549f00f0290080d61a4195fb4180f596cb0e42f2

    • SHA512

      3c281dc2b168e7d881c11b092f1d0f2ce7371e413a082d6e948e37053a89e0f3f4764d4f3300551b04b53622634ddddae6c107879d8769bf5712873ac8741c1f

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc400:NFWPClFk0

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks