Overview

overview

10

Static

static

10

c1ba52331a...79.exe

windows7-x64

10

c1ba52331a...79.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

  • Size

    3.2MB

  • Sample

    240530-czex6sbc7z

  • MD5

    3b8b793a16f2a624ee007b804617cb73

  • SHA1

    6b6ce03926ccee43a684060c8769f6f72756774e

  • SHA256

    c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

  • SHA512

    9205cf12f17278ff78955d3d9d66d3b4501ac3ab418aebf22e2468d16e6756f38db01feee704a8b5a1777fc3ebe34eff576b26e9f343839ad931af7f2ba7ed30

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40u:NFWPClFku

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

    • Size

      3.2MB

    • MD5

      3b8b793a16f2a624ee007b804617cb73

    • SHA1

      6b6ce03926ccee43a684060c8769f6f72756774e

    • SHA256

      c1ba52331a834a0f4e3f44d73d4c540a4561d463b62adac5bc177a8b76005279

    • SHA512

      9205cf12f17278ff78955d3d9d66d3b4501ac3ab418aebf22e2468d16e6756f38db01feee704a8b5a1777fc3ebe34eff576b26e9f343839ad931af7f2ba7ed30

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc40u:NFWPClFku

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks