Overview

overview

10

Static

static

10

c79bce6c3e...36.exe

windows7-x64

10

c79bce6c3e...36.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36

  • Size

    3.9MB

  • Sample

    240415-deay6acg89

  • MD5

    887cea6aba34f7bc62aad589133f0055

  • SHA1

    0477e5a759d640d9edf9d71985bfa9776f332538

  • SHA256

    c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36

  • SHA512

    720794628c31abafa26e727d2c3033b03e4cf0d5fd9e8cd6cf8831d606b5c90b23f8142674a3c4ef0dc9252c3f6f679ff6c493c6c816b085b8a2bd9cf8f717ab

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWg:SbBeSFkc

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36

    • Size

      3.9MB

    • MD5

      887cea6aba34f7bc62aad589133f0055

    • SHA1

      0477e5a759d640d9edf9d71985bfa9776f332538

    • SHA256

      c79bce6c3eee6794637dee81ad2422fa56e04dcf6d7f8a6f9c92e1bce1c4fb36

    • SHA512

      720794628c31abafa26e727d2c3033b03e4cf0d5fd9e8cd6cf8831d606b5c90b23f8142674a3c4ef0dc9252c3f6f679ff6c493c6c816b085b8a2bd9cf8f717ab

    • SSDEEP

      98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWg:SbBeSFkc

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks