Overview

overview

10

Static

static

10

2eb96c71df...1d.exe

windows7-x64

10

2eb96c71df...1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2eb96c71df25fdd1c5b27e58189708d640530fdfac6e48bf6dc94318957cdb1d.exe

  • Size

    1.8MB

  • Sample

    240705-c7a9ys1alk

  • MD5

    07b4aaba061c473687999aa0502d6e20

  • SHA1

    800dbc638f411231326f76837550d47d8fac538e

  • SHA256

    2eb96c71df25fdd1c5b27e58189708d640530fdfac6e48bf6dc94318957cdb1d

  • SHA512

    d04ae6155cf072976fbb2112c7fa5097e7e1ccc75d2a08c0295e66894e5acb12e5d39a0c158cf86148f3857cb0c2ddc6ca4615afee6a2718a8975330cc8c8d24

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/Vx+hZW0VGeE5l7Qrq:Lz071uv4BPMkibTIA5CJJAbi

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2eb96c71df25fdd1c5b27e58189708d640530fdfac6e48bf6dc94318957cdb1d.exe

    • Size

      1.8MB

    • MD5

      07b4aaba061c473687999aa0502d6e20

    • SHA1

      800dbc638f411231326f76837550d47d8fac538e

    • SHA256

      2eb96c71df25fdd1c5b27e58189708d640530fdfac6e48bf6dc94318957cdb1d

    • SHA512

      d04ae6155cf072976fbb2112c7fa5097e7e1ccc75d2a08c0295e66894e5acb12e5d39a0c158cf86148f3857cb0c2ddc6ca4615afee6a2718a8975330cc8c8d24

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/Vx+hZW0VGeE5l7Qrq:Lz071uv4BPMkibTIA5CJJAbi

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks