Overview

overview

10

Static

static

10

f220046ff4...a1.exe

windows7-x64

10

f220046ff4...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f220046ff4ba64475d370b72ef2372205aab340b9c8ae96b076b774d4790f2a1

  • Size

    1.7MB

  • Sample

    240617-ejkvlaxdkp

  • MD5

    b853506a6d84231582ab91439b601f8f

  • SHA1

    c708603d779a09833df8026e72b779dd9b953aac

  • SHA256

    f220046ff4ba64475d370b72ef2372205aab340b9c8ae96b076b774d4790f2a1

  • SHA512

    2615ff3e6e47a368a866912169aa56992c536cee317cf9aa7881270731656164e58c885a2d91b3045ea33a6b8de6dad6e69f108d3151d0cf9c8fe804cc91a6a5

  • SSDEEP

    49152:Lz071uv4BPMkHC0INx29L5KQ2uIbQHlGij:NABV

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      f220046ff4ba64475d370b72ef2372205aab340b9c8ae96b076b774d4790f2a1

    • Size

      1.7MB

    • MD5

      b853506a6d84231582ab91439b601f8f

    • SHA1

      c708603d779a09833df8026e72b779dd9b953aac

    • SHA256

      f220046ff4ba64475d370b72ef2372205aab340b9c8ae96b076b774d4790f2a1

    • SHA512

      2615ff3e6e47a368a866912169aa56992c536cee317cf9aa7881270731656164e58c885a2d91b3045ea33a6b8de6dad6e69f108d3151d0cf9c8fe804cc91a6a5

    • SSDEEP

      49152:Lz071uv4BPMkHC0INx29L5KQ2uIbQHlGij:NABV

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks