General

  • Target

    7aa2770bd14088211f3503474fa049cf4605a7db48fdf76c9e5940b30616a497

  • Size

    3.4MB

  • Sample

    240522-bx17ysga99

  • MD5

    7c4f355838013ce9baac895f2fdde9af

  • SHA1

    13d6d07d9c63b4e2389d12ff6f060ffab363de80

  • SHA256

    7aa2770bd14088211f3503474fa049cf4605a7db48fdf76c9e5940b30616a497

  • SHA512

    26697258ff62cab163121a5c6a55688ca272af0e5c878d7d592e2af22b9ef45d12421a125475107b9a8362cd63497fb6c427f983a41e61e6aa98423abdbec111

  • SSDEEP

    98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc404:wFWPClFk4

Score
10/10

Malware Config

Targets

    • Target

      7aa2770bd14088211f3503474fa049cf4605a7db48fdf76c9e5940b30616a497

    • Size

      3.4MB

    • MD5

      7c4f355838013ce9baac895f2fdde9af

    • SHA1

      13d6d07d9c63b4e2389d12ff6f060ffab363de80

    • SHA256

      7aa2770bd14088211f3503474fa049cf4605a7db48fdf76c9e5940b30616a497

    • SHA512

      26697258ff62cab163121a5c6a55688ca272af0e5c878d7d592e2af22b9ef45d12421a125475107b9a8362cd63497fb6c427f983a41e61e6aa98423abdbec111

    • SSDEEP

      98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc404:wFWPClFk4

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks