Overview

overview

10

Static

static

10

b702c5031d...c5.exe

windows7-x64

10

b702c5031d...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b702c5031dda8ad6076b76695aa2d1dc8543089cee26419e3d44db6075ed3ac5

  • Size

    1.9MB

  • Sample

    240620-cnxzlsxerk

  • MD5

    287e2d8a7c15c6a5bedefce0a86e504d

  • SHA1

    74ef7408621c4944fd94b8c5e0fc7e26f788b108

  • SHA256

    b702c5031dda8ad6076b76695aa2d1dc8543089cee26419e3d44db6075ed3ac5

  • SHA512

    a813e62661ac2aeb40ff3013c8dd08d0beb2478e34089a7400366e37bd42e26fdae1684cf000273703319ef1f9e5d9dfa26acef42912efd5dd36e595bc99c316

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY4tnSLetEBm8CBBKUtdnILc2kSL:Lz071uv4BPMkibTIA5GXEBQRtzCKbO1

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      b702c5031dda8ad6076b76695aa2d1dc8543089cee26419e3d44db6075ed3ac5

    • Size

      1.9MB

    • MD5

      287e2d8a7c15c6a5bedefce0a86e504d

    • SHA1

      74ef7408621c4944fd94b8c5e0fc7e26f788b108

    • SHA256

      b702c5031dda8ad6076b76695aa2d1dc8543089cee26419e3d44db6075ed3ac5

    • SHA512

      a813e62661ac2aeb40ff3013c8dd08d0beb2478e34089a7400366e37bd42e26fdae1684cf000273703319ef1f9e5d9dfa26acef42912efd5dd36e595bc99c316

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY4tnSLetEBm8CBBKUtdnILc2kSL:Lz071uv4BPMkibTIA5GXEBQRtzCKbO1

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks