xmrig | edc33e9fb4ace4f61de399dda19f9f217352056f09c086e7105ddd228fd37972 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

virussign....00.exe

windows7-x64

virussign....00.exe

windows10-2004-x64

Sharing

General

Target

virussign.com_bc3d24ff504a33f506a6bb780dc3df00.vir
Size

1.5MB
Sample

240528-wwzmyseg3y
MD5

bc3d24ff504a33f506a6bb780dc3df00
SHA1

178c00fabc627a84ba91d7f5b34697504708ea7a
SHA256

edc33e9fb4ace4f61de399dda19f9f217352056f09c086e7105ddd228fd37972
SHA512

986856cfd73a8eaf43367921d3a0a333071fd54c39d7bbdda3741d51342618c88e1589e7338fe28077baa178f2bf47c23638fd31a3d128ce3e88a279b839c995
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJ/x:knw9oUUEEDl3aEUiRSW2j3/xbn

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

virussign.com_bc3d24ff504a33f506a6bb780dc3df00.exe

Resource

win7-20240221-en

xmrig miner upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

virussign.com_bc3d24ff504a33f506a6bb780dc3df00.exe

Resource

win10v2004-20240508-en

xmrig miner upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  virussign.com_bc3d24ff504a33f506a6bb780dc3df00.vir
- Size
  
  1.5MB
- MD5
  
  bc3d24ff504a33f506a6bb780dc3df00
- SHA1
  
  178c00fabc627a84ba91d7f5b34697504708ea7a
- SHA256
  
  edc33e9fb4ace4f61de399dda19f9f217352056f09c086e7105ddd228fd37972
- SHA512
  
  986856cfd73a8eaf43367921d3a0a333071fd54c39d7bbdda3741d51342618c88e1589e7338fe28077baa178f2bf47c23638fd31a3d128ce3e88a279b839c995
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlWXWZdO23/oF7u3hmxjfU3KXAnmwJThEz8tU/FVJ/x:knw9oUUEEDl3aEUiRSW2j3/xbn
Score

10^/10

xmrig miner upx
- Suspicious use of NtCreateUserProcessOtherParentProcess
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.