General

  • Target

    164eed8fe58ca03f8efbef8d1c78600732e2e806588de95a361f83fee3750df0

  • Size

    1.3MB

  • Sample

    240527-xxkqvsef7y

  • MD5

    a97e0d4ee4f8110161f0f1c94803400d

  • SHA1

    160fb0d375f9fde65a81f7853535fe5db2c90e7f

  • SHA256

    164eed8fe58ca03f8efbef8d1c78600732e2e806588de95a361f83fee3750df0

  • SHA512

    1d257d2e8cdde03c517ac3e25e0173f61a87296e95c2ea34cf1d6f00a9d32990d76a0ecebae4253d8f31c6c0fa8f48d558eca4a8b9733e1f0b836b2f1905d3a5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFoaE:knw9oUUEEDl+xTMS8Tg3avLon

Score
10/10

Malware Config

Targets

    • Target

      164eed8fe58ca03f8efbef8d1c78600732e2e806588de95a361f83fee3750df0

    • Size

      1.3MB

    • MD5

      a97e0d4ee4f8110161f0f1c94803400d

    • SHA1

      160fb0d375f9fde65a81f7853535fe5db2c90e7f

    • SHA256

      164eed8fe58ca03f8efbef8d1c78600732e2e806588de95a361f83fee3750df0

    • SHA512

      1d257d2e8cdde03c517ac3e25e0173f61a87296e95c2ea34cf1d6f00a9d32990d76a0ecebae4253d8f31c6c0fa8f48d558eca4a8b9733e1f0b836b2f1905d3a5

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFoaE:knw9oUUEEDl+xTMS8Tg3avLon

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks