Overview

overview

10

Static

static

10

51dae1c766...e9.exe

windows7-x64

10

51dae1c766...e9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51dae1c766b29c4e7d9facf4f9ffb795e61789e1d1b631e4870561d0de058de9

  • Size

    1.7MB

  • Sample

    240520-2b9v3sac6t

  • MD5

    f6ae5762591e6783f2bce18c3afa4292

  • SHA1

    3a49673d4858a567ad5a2d72ebc4e10050231d52

  • SHA256

    51dae1c766b29c4e7d9facf4f9ffb795e61789e1d1b631e4870561d0de058de9

  • SHA512

    c1a77827535dbcd64986793ccc7474bf3a85485db5f36a40aca31766d6c0cca3a8c5225b9b4efd58d047f459026e67e42d04b7b98b0814d6a04101f77880aaf9

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9oztFwIR1Dy2NRGK3J78:GemTLkNdfE0pZas

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      51dae1c766b29c4e7d9facf4f9ffb795e61789e1d1b631e4870561d0de058de9

    • Size

      1.7MB

    • MD5

      f6ae5762591e6783f2bce18c3afa4292

    • SHA1

      3a49673d4858a567ad5a2d72ebc4e10050231d52

    • SHA256

      51dae1c766b29c4e7d9facf4f9ffb795e61789e1d1b631e4870561d0de058de9

    • SHA512

      c1a77827535dbcd64986793ccc7474bf3a85485db5f36a40aca31766d6c0cca3a8c5225b9b4efd58d047f459026e67e42d04b7b98b0814d6a04101f77880aaf9

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9oztFwIR1Dy2NRGK3J78:GemTLkNdfE0pZas

    Score
    10/10
    xmrigminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks