Overview

overview

10

Static

static

10

42361abc02...f4.exe

windows7-x64

10

42361abc02...f4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    42361abc0260db3ef86c8afd4e3ec3591361afa5dcda5a255ba6d00a9352b2f4

  • Size

    1.8MB

  • Sample

    240615-znzvjatelc

  • MD5

    57a7c87848c152113d29002e44bc50b2

  • SHA1

    0cf26d4664de822b06db76f7a46cc818e250c719

  • SHA256

    42361abc0260db3ef86c8afd4e3ec3591361afa5dcda5a255ba6d00a9352b2f4

  • SHA512

    bb38998e48d1f1fe51882cf8dd6c9eddf1f0c13e1a003fc1e544ae3bd14f083243bd494e2eedd07b7185b007bafb3bf436b3efe4ac3a2da845a7e2b8cac5c71c

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMeb7FxUOqyGL:RWWBib356utgC

Score
10/10
xmrigminerpersistenceupx

Malware Config

Targets

    • Target

      42361abc0260db3ef86c8afd4e3ec3591361afa5dcda5a255ba6d00a9352b2f4

    • Size

      1.8MB

    • MD5

      57a7c87848c152113d29002e44bc50b2

    • SHA1

      0cf26d4664de822b06db76f7a46cc818e250c719

    • SHA256

      42361abc0260db3ef86c8afd4e3ec3591361afa5dcda5a255ba6d00a9352b2f4

    • SHA512

      bb38998e48d1f1fe51882cf8dd6c9eddf1f0c13e1a003fc1e544ae3bd14f083243bd494e2eedd07b7185b007bafb3bf436b3efe4ac3a2da845a7e2b8cac5c71c

    • SSDEEP

      49152:ROdWCCi7/raU56uL3pgrCEdMeb7FxUOqyGL:RWWBib356utgC

    Score
    10/10
    xmrigminerupxpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks