Overview

overview

10

Static

static

10

416475d216...41.exe

windows7-x64

10

416475d216...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    416475d216405933803899aa9c2ee17ccc46f71fcb2ff2f93b13706e52ce6841

  • Size

    1.9MB

  • Sample

    240509-zna66sea6t

  • MD5

    738f8b8b1af3e720c0422914047ad10e

  • SHA1

    b9ae4788fd2acba7f10fd94db39e3d69c1080947

  • SHA256

    416475d216405933803899aa9c2ee17ccc46f71fcb2ff2f93b13706e52ce6841

  • SHA512

    d79c58b972edd0779579afb1b18f10edc85b83fdcf57d057bf79d50ce3150ccb19c22d194a6481f01449cfd071a6efc4ea33a0ad7a783e8a2d1c22d21154d86d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOMkMC0acDKAKXRE0q:knw9oUUEEDlGUh+hNfKeSP

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      416475d216405933803899aa9c2ee17ccc46f71fcb2ff2f93b13706e52ce6841

    • Size

      1.9MB

    • MD5

      738f8b8b1af3e720c0422914047ad10e

    • SHA1

      b9ae4788fd2acba7f10fd94db39e3d69c1080947

    • SHA256

      416475d216405933803899aa9c2ee17ccc46f71fcb2ff2f93b13706e52ce6841

    • SHA512

      d79c58b972edd0779579afb1b18f10edc85b83fdcf57d057bf79d50ce3150ccb19c22d194a6481f01449cfd071a6efc4ea33a0ad7a783e8a2d1c22d21154d86d

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOMkMC0acDKAKXRE0q:knw9oUUEEDlGUh+hNfKeSP

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks