xmrig | 75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d | Triage

Submit
Reports

Overview

overview

Static

static

75e49d686d...2d.exe

windows7-x64

75e49d686d...2d.exe

windows10-2004-x64

Sharing

General

Target

75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d
Size

1.9MB
Sample

240522-blbg6aff55
MD5

2b9358b899ba234538726a6bccac64ff
SHA1

c7e4b494dc0830fdde2712d7399b7d72793c25b9
SHA256

75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d
SHA512

d9282e468476044715c21e61cef8ef1bd9055c59d604c77646e158592f4b4b74beafe6152d8b53ed42e6f300598388d0123018471172915cdc6c5627e279e1eb
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlGC78XI8uAT5/e96ApSzUICNdHzfMTgiZHq5ulLItV:knw9oUUEEDlGUSuAQSzCTCFstz20

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

5 signatures

Behavioral task

behavioral1

Sample

75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d.exe

Resource

win7-20240508-en

xmrig miner upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d.exe

Resource

win10v2004-20240508-en

xmrig miner upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d
- Size
  
  1.9MB
- MD5
  
  2b9358b899ba234538726a6bccac64ff
- SHA1
  
  c7e4b494dc0830fdde2712d7399b7d72793c25b9
- SHA256
  
  75e49d686dd9f164d7c8ae2ddc362f43d78de309a194d95a7bc3dd62dd8da02d
- SHA512
  
  d9282e468476044715c21e61cef8ef1bd9055c59d604c77646e158592f4b4b74beafe6152d8b53ed42e6f300598388d0123018471172915cdc6c5627e279e1eb
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlGC78XI8uAT5/e96ApSzUICNdHzfMTgiZHq5ulLItV:knw9oUUEEDlGUSuAQSzCTCFstz20
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy