Overview

overview

10

Static

static

10

830a9f4bb5...a6.exe

windows7-x64

10

830a9f4bb5...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    830a9f4bb567f39ffa7d763167755de8bb212dbc0d906c5877c5a706a71fcba6

  • Size

    2.3MB

  • Sample

    240522-3sshssdg55

  • MD5

    1a0f01f0907d2c31537ccd2de0ee486b

  • SHA1

    7bfe0581b8b1f29ccf87f5300d88758467dbdf98

  • SHA256

    830a9f4bb567f39ffa7d763167755de8bb212dbc0d906c5877c5a706a71fcba6

  • SHA512

    9d972534a85bc51c8d69df447087c740a8b9d16a6064b5cd1e92c4148ca44d6b9ddd08542fe16a3a50fe97ccaf2234c4dfe56ef16fdddf675a04befa3f413aaf

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcqn2T:N0GnJMOWPClFdx6e0EALKWVTffZiPAc1

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      830a9f4bb567f39ffa7d763167755de8bb212dbc0d906c5877c5a706a71fcba6

    • Size

      2.3MB

    • MD5

      1a0f01f0907d2c31537ccd2de0ee486b

    • SHA1

      7bfe0581b8b1f29ccf87f5300d88758467dbdf98

    • SHA256

      830a9f4bb567f39ffa7d763167755de8bb212dbc0d906c5877c5a706a71fcba6

    • SHA512

      9d972534a85bc51c8d69df447087c740a8b9d16a6064b5cd1e92c4148ca44d6b9ddd08542fe16a3a50fe97ccaf2234c4dfe56ef16fdddf675a04befa3f413aaf

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcqn2T:N0GnJMOWPClFdx6e0EALKWVTffZiPAc1

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks