xmrig | a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

a01a1418da...a8.exe

windows7-x64

a01a1418da...a8.exe

windows10-2004-x64

Sharing

General

Target

a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8
Size

1.3MB
Sample

240506-3tzcqsbh58
MD5

4dc9318b1dbc223e8fa1910bd9d2c75a
SHA1

14c62fb5f7b6921a77e667637c77088dbdeed46d
SHA256

a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8
SHA512

abda7cfa15843495a96e8f6348d5d2a6c691e4d819eaccb4caf5371676dfb68f7d84b4ec36023ae6ae49352ee21d82b8bffc13dea1a3f93b6873809036cc14b9
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0Z:knw9oUUEEDlnd+XRqJZwTKs

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

5 signatures

Behavioral task

behavioral1

Sample

a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8.exe

Resource

win7-20240215-en

xmrig miner upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8.exe

Resource

win10v2004-20240419-en

xmrig miner upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8
- Size
  
  1.3MB
- MD5
  
  4dc9318b1dbc223e8fa1910bd9d2c75a
- SHA1
  
  14c62fb5f7b6921a77e667637c77088dbdeed46d
- SHA256
  
  a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8
- SHA512
  
  abda7cfa15843495a96e8f6348d5d2a6c691e4d819eaccb4caf5371676dfb68f7d84b4ec36023ae6ae49352ee21d82b8bffc13dea1a3f93b6873809036cc14b9
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0Z:knw9oUUEEDlnd+XRqJZwTKs
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy