Overview

overview

10

Static

static

10

10ad2f242f...cs.exe

windows7-x64

10

10ad2f242f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10ad2f242f41aab4107385f962b993c0_NeikiAnalytics

  • Size

    3.2MB

  • Sample

    240512-p57xcsaf78

  • MD5

    10ad2f242f41aab4107385f962b993c0

  • SHA1

    055f74b06f53962aebcece6a552918fa320d5a81

  • SHA256

    13f46653f0a8c346f9f814a3f382870883cb65003465239c0a5e4004493ba2d8

  • SHA512

    6dca5c464de4b23f7cd62829f4a95b861b0f46f7aac3786963eceb8fe901230faa28134705ff8cee87e460bc4559f38f53c8a82e5e091ef8575b1ec619e4acd2

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWW:SbBeSFkK

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      10ad2f242f41aab4107385f962b993c0_NeikiAnalytics

    • Size

      3.2MB

    • MD5

      10ad2f242f41aab4107385f962b993c0

    • SHA1

      055f74b06f53962aebcece6a552918fa320d5a81

    • SHA256

      13f46653f0a8c346f9f814a3f382870883cb65003465239c0a5e4004493ba2d8

    • SHA512

      6dca5c464de4b23f7cd62829f4a95b861b0f46f7aac3786963eceb8fe901230faa28134705ff8cee87e460bc4559f38f53c8a82e5e091ef8575b1ec619e4acd2

    • SSDEEP

      98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWW:SbBeSFkK

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks