Overview

overview

10

Static

static

10

6a6ff15a19...4a.exe

windows7-x64

10

6a6ff15a19...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a6ff15a19be2374bf629345bb6d96352bad853c6c5401da5b0f2bc95dbec04a

  • Size

    1.3MB

  • Sample

    240522-2qmzvsbh82

  • MD5

    1f597119ab48006de10e39b33f742f8e

  • SHA1

    35d7e87baa2a05bb5d544d9b467aab06c9482a1d

  • SHA256

    6a6ff15a19be2374bf629345bb6d96352bad853c6c5401da5b0f2bc95dbec04a

  • SHA512

    866382e8ade2039fce708166b8cda0dd5d2a31f2eb6117255b5ec2bf4fa0c5d116568613f4ac8122110e665d5c23fb98db26474c6a67070aec42981bc5eb3279

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcdSc0rpYEBG:knw9oUUEEDlGUJ8Y9cdOry6G

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      6a6ff15a19be2374bf629345bb6d96352bad853c6c5401da5b0f2bc95dbec04a

    • Size

      1.3MB

    • MD5

      1f597119ab48006de10e39b33f742f8e

    • SHA1

      35d7e87baa2a05bb5d544d9b467aab06c9482a1d

    • SHA256

      6a6ff15a19be2374bf629345bb6d96352bad853c6c5401da5b0f2bc95dbec04a

    • SHA512

      866382e8ade2039fce708166b8cda0dd5d2a31f2eb6117255b5ec2bf4fa0c5d116568613f4ac8122110e665d5c23fb98db26474c6a67070aec42981bc5eb3279

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcdSc0rpYEBG:knw9oUUEEDlGUJ8Y9cdOry6G

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks