Overview

overview

10

Static

static

10

064a0bc2b9...ff.exe

windows7-x64

10

064a0bc2b9...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    064a0bc2b93ba29ccaced8ecc622e2f75acc7677f6cb23eb8bb05ed4d718a2ff.exe

  • Size

    1.1MB

  • Sample

    240703-zdt7asweqn

  • MD5

    b644d211de1c9efa91f0a7afa9d82ed0

  • SHA1

    5893ac688f4cf4491242c5687fb7fca7c29f9dbc

  • SHA256

    064a0bc2b93ba29ccaced8ecc622e2f75acc7677f6cb23eb8bb05ed4d718a2ff

  • SHA512

    6c0d6cbc624f3770a0e464cb7b88a4447194b89f507f65956ffda895c353b3fda72036d05d51e1efb82105b1047d60197d9f9da72e3f5f61cef795e5eeef570d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIOTEgI:knw9oUUEEDlGU5h

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      064a0bc2b93ba29ccaced8ecc622e2f75acc7677f6cb23eb8bb05ed4d718a2ff.exe

    • Size

      1.1MB

    • MD5

      b644d211de1c9efa91f0a7afa9d82ed0

    • SHA1

      5893ac688f4cf4491242c5687fb7fca7c29f9dbc

    • SHA256

      064a0bc2b93ba29ccaced8ecc622e2f75acc7677f6cb23eb8bb05ed4d718a2ff

    • SHA512

      6c0d6cbc624f3770a0e464cb7b88a4447194b89f507f65956ffda895c353b3fda72036d05d51e1efb82105b1047d60197d9f9da72e3f5f61cef795e5eeef570d

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIOTEgI:knw9oUUEEDlGU5h

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks