Overview

overview

10

Static

static

10

ec78efff60...cs.exe

windows7-x64

10

ec78efff60...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec78efff607aeb99f8c6e4861e353370_NeikiAnalytics

  • Size

    3.2MB

  • Sample

    240509-y6snhafh73

  • MD5

    ec78efff607aeb99f8c6e4861e353370

  • SHA1

    38701c067c71c7e7b58cde946060736b0982b66e

  • SHA256

    392056e44aab7b2299952f08d2a65ed9831adbe0efc7da65d336be06c69f1daa

  • SHA512

    3e3a466d489598c408ea3feb76327d953eda10a53b5a2029cfc70a49adf9fd368e6b57db6676485703af9835aa52241616a7927bf531d9b871c00624a402cbaf

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40Z:NFWPClFkZ

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      ec78efff607aeb99f8c6e4861e353370_NeikiAnalytics

    • Size

      3.2MB

    • MD5

      ec78efff607aeb99f8c6e4861e353370

    • SHA1

      38701c067c71c7e7b58cde946060736b0982b66e

    • SHA256

      392056e44aab7b2299952f08d2a65ed9831adbe0efc7da65d336be06c69f1daa

    • SHA512

      3e3a466d489598c408ea3feb76327d953eda10a53b5a2029cfc70a49adf9fd368e6b57db6676485703af9835aa52241616a7927bf531d9b871c00624a402cbaf

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40Z:NFWPClFkZ

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks