Overview

overview

10

Static

static

10

1dd9996b6f...cs.exe

windows7-x64

10

1dd9996b6f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1dd9996b6fa65752db4cf4a0030c1b20_NeikiAnalytics

  • Size

    1.4MB

  • Sample

    240514-y21hjsee3s

  • MD5

    1dd9996b6fa65752db4cf4a0030c1b20

  • SHA1

    dfbbec524205c1a193a15bde0cb8b76b91664238

  • SHA256

    ea46b3b711763a118a6f6e9195afba398b3576c17f31b40739c8c12a3c095a74

  • SHA512

    0b62369a5ce710ebf483605c63d558a8f08e6f4f67b955b2bdb4a54d6ddae48bb5a0865a81563c799e8e5408dab01cc1216a7e1a4f8ebce626b2adde6158e081

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mul3DmL:knw9oUUEEDlnDwq6Sd0R7qV2vk+94yK

Score
10/10
xmrigminerpersistenceupx

Malware Config

Targets

    • Target

      1dd9996b6fa65752db4cf4a0030c1b20_NeikiAnalytics

    • Size

      1.4MB

    • MD5

      1dd9996b6fa65752db4cf4a0030c1b20

    • SHA1

      dfbbec524205c1a193a15bde0cb8b76b91664238

    • SHA256

      ea46b3b711763a118a6f6e9195afba398b3576c17f31b40739c8c12a3c095a74

    • SHA512

      0b62369a5ce710ebf483605c63d558a8f08e6f4f67b955b2bdb4a54d6ddae48bb5a0865a81563c799e8e5408dab01cc1216a7e1a4f8ebce626b2adde6158e081

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mul3DmL:knw9oUUEEDlnDwq6Sd0R7qV2vk+94yK

    Score
    10/10
    xmrigminerupxpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks