Overview

overview

10

Static

static

10

4e2ef01b2a...7c.exe

windows7-x64

10

4e2ef01b2a...7c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e2ef01b2a7fef01721a9216926ccd397705ee9930840b4b3efe612fa63fe87c

  • Size

    2.5MB

  • Sample

    240527-1y99pacg98

  • MD5

    62a509c175913baf684020c9596f3dd2

  • SHA1

    7321e64054c865bf0556bb2ad721ab40b7fcb526

  • SHA256

    4e2ef01b2a7fef01721a9216926ccd397705ee9930840b4b3efe612fa63fe87c

  • SHA512

    31a38203fad8539c1bed3d1ce66bdb830047661d1ab5ec93082e33896eb7b97856605fa64392188bedb7c300bf7eb2a7b7d65c9958995a5e808b3b2542787e03

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmntcR0g:N0GnJMOWPClFdx6e0EALKWVTffZiPAcj

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      4e2ef01b2a7fef01721a9216926ccd397705ee9930840b4b3efe612fa63fe87c

    • Size

      2.5MB

    • MD5

      62a509c175913baf684020c9596f3dd2

    • SHA1

      7321e64054c865bf0556bb2ad721ab40b7fcb526

    • SHA256

      4e2ef01b2a7fef01721a9216926ccd397705ee9930840b4b3efe612fa63fe87c

    • SHA512

      31a38203fad8539c1bed3d1ce66bdb830047661d1ab5ec93082e33896eb7b97856605fa64392188bedb7c300bf7eb2a7b7d65c9958995a5e808b3b2542787e03

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmntcR0g:N0GnJMOWPClFdx6e0EALKWVTffZiPAcj

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks