xmrig | a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

a2fd90e483...1f.exe

windows7-x64

a2fd90e483...1f.exe

windows10-2004-x64

Sharing

General

Target

a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f
Size

1.9MB
Sample

240315-2elbwscf3t
MD5

2ec0dc83c7917eba7c8fa38e8740aad7
SHA1

31cab6cda43c4cd61b810ae603de8bfa5a048bd8
SHA256

a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f
SHA512

6212aa7298fabe1ce58680f91cac7235381ac73650156639a8532431c5882852abd6b4ccddf520c9401b2a71118649d92eb8d5786d6e16426f0c3f198ca2d43b
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlGC78XCejQCCLtZt4Hpti/3AFhgGrTk3HeQIgcS70h:knw9oUUEEDlGUrMNi/3ADGPrAx9v

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

5 signatures

Behavioral task

behavioral1

Sample

a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f.exe

Resource

win7-20240221-en

xmrig miner upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f.exe

Resource

win10v2004-20240226-en

xmrig miner upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f
- Size
  
  1.9MB
- MD5
  
  2ec0dc83c7917eba7c8fa38e8740aad7
- SHA1
  
  31cab6cda43c4cd61b810ae603de8bfa5a048bd8
- SHA256
  
  a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f
- SHA512
  
  6212aa7298fabe1ce58680f91cac7235381ac73650156639a8532431c5882852abd6b4ccddf520c9401b2a71118649d92eb8d5786d6e16426f0c3f198ca2d43b
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlGC78XCejQCCLtZt4Hpti/3AFhgGrTk3HeQIgcS70h:knw9oUUEEDlGUrMNi/3ADGPrAx9v
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy