Overview

overview

10

Static

static

10

99e829631f...cf.exe

windows7-x64

10

99e829631f...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    99e829631f39db8396af7a006d3fbfddaffc5ca173ec7353d0a51076225f43cf

  • Size

    1.6MB

  • Sample

    240326-2tv5mshd61

  • MD5

    2686ed35acaee502b2868cf319243752

  • SHA1

    7856d221dc0e9881097bfdc7aa76f0d50a46b1c4

  • SHA256

    99e829631f39db8396af7a006d3fbfddaffc5ca173ec7353d0a51076225f43cf

  • SHA512

    17f1e1b31a67efddc06b5a34879cefb4393dbedd7e0f25eec2de7fda3096908b8fe09861ee8f621516cfde5acd33005eb58968ff278f8bbdb0bbd7eb8285ceaa

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOhSkEaFUG51+oAL7ZQJTVMKTbc1gsemVk8e+ogzOX:knw9oUUEEDlOh516Q+oxxcdBDog6lAC

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      99e829631f39db8396af7a006d3fbfddaffc5ca173ec7353d0a51076225f43cf

    • Size

      1.6MB

    • MD5

      2686ed35acaee502b2868cf319243752

    • SHA1

      7856d221dc0e9881097bfdc7aa76f0d50a46b1c4

    • SHA256

      99e829631f39db8396af7a006d3fbfddaffc5ca173ec7353d0a51076225f43cf

    • SHA512

      17f1e1b31a67efddc06b5a34879cefb4393dbedd7e0f25eec2de7fda3096908b8fe09861ee8f621516cfde5acd33005eb58968ff278f8bbdb0bbd7eb8285ceaa

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlOhSkEaFUG51+oAL7ZQJTVMKTbc1gsemVk8e+ogzOX:knw9oUUEEDlOh516Q+oxxcdBDog6lAC

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks