General

  • Target

    dd568195ff6e0c0ee5b77cef847591a2bde1b85e62398b778a5744c3774da2f7

  • Size

    3.2MB

  • Sample

    240528-ecl43sdf4z

  • MD5

    72739ba551f3261af7379556cca9e10f

  • SHA1

    e59b57d1badf7d109dc2a04b1016ebb7144e142f

  • SHA256

    dd568195ff6e0c0ee5b77cef847591a2bde1b85e62398b778a5744c3774da2f7

  • SHA512

    fb8ccc6d07c440d402c7604e045a2914b5ea43e6ed6214a68dbd7c36227460cd5b24dca4e4026a194103c3a707c57fe6e30e4b7bf3b749412f2dddc2806892c6

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc42:NFWPClFG

Score
10/10

Malware Config

Targets

    • Target

      dd568195ff6e0c0ee5b77cef847591a2bde1b85e62398b778a5744c3774da2f7

    • Size

      3.2MB

    • MD5

      72739ba551f3261af7379556cca9e10f

    • SHA1

      e59b57d1badf7d109dc2a04b1016ebb7144e142f

    • SHA256

      dd568195ff6e0c0ee5b77cef847591a2bde1b85e62398b778a5744c3774da2f7

    • SHA512

      fb8ccc6d07c440d402c7604e045a2914b5ea43e6ed6214a68dbd7c36227460cd5b24dca4e4026a194103c3a707c57fe6e30e4b7bf3b749412f2dddc2806892c6

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc42:NFWPClFG

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks