Overview

overview

10

Static

static

3

final1.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    final1.EXE

  • Size

    36.9MB

  • Sample

    240528-shpn2shh3x

  • MD5

    4e463f20f2fd3d53e026b543af7cf6d5

  • SHA1

    d682f9e49845b855a7b16c584b528e13fcd3fbd6

  • SHA256

    b95fdb4a4b5303fda5264c1879f3ad1c847d7fea4c924e7aef7e5248f5796054

  • SHA512

    94e7ea55e96ce1118abd283473e66dedc933d7b6bf10713e3da4db5fa91bba3ca0a61580f01213c62282c7b272855c8c8b43e2f3fa410339349676f8d6eaf6de

  • SSDEEP

    786432:iwVo2WemvOTIVQKzugWcr9YIZUduYvcbFfSmMCqCKncs9Zllz:iNemvOTI2KzjqDduYEpts7

Score
10/10
xmrigevasionexecutionminerpersistencepyinstallerupx

Malware Config

Targets

    • Target

      final1.EXE

    • Size

      36.9MB

    • MD5

      4e463f20f2fd3d53e026b543af7cf6d5

    • SHA1

      d682f9e49845b855a7b16c584b528e13fcd3fbd6

    • SHA256

      b95fdb4a4b5303fda5264c1879f3ad1c847d7fea4c924e7aef7e5248f5796054

    • SHA512

      94e7ea55e96ce1118abd283473e66dedc933d7b6bf10713e3da4db5fa91bba3ca0a61580f01213c62282c7b272855c8c8b43e2f3fa410339349676f8d6eaf6de

    • SSDEEP

      786432:iwVo2WemvOTIVQKzugWcr9YIZUduYvcbFfSmMCqCKncs9Zllz:iNemvOTI2KzjqDduYEpts7

    Score
    10/10
    xmrigevasionexecutionminerpersistencepyinstallerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks