Overview

overview

10

Static

static

10

053b410e0f...0N.exe

windows7-x64

10

053b410e0f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    053b410e0f7fc23a563c7ec455b272c0N.exe

  • Size

    1.9MB

  • Sample

    240706-l6fmqavhjl

  • MD5

    053b410e0f7fc23a563c7ec455b272c0

  • SHA1

    bf00425b674bcaae905e88c8dae028a9d7d2af93

  • SHA256

    8862c2052bc5ce19a6155a31d3e05c3fef9b87bccb390ead28f366781bbd22bc

  • SHA512

    393d4dcf94c1d4ddd2a89e542c535743ba6fee8f966716762fed0e828db2f26979c503093fc2cd9a8859481d6c8805280e0193ce2bd9ef565e4bb0bbfffa7b8c

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZX71Fq86zU6:NABD

Score
10/10
xmrigexecutionminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      053b410e0f7fc23a563c7ec455b272c0N.exe

    • Size

      1.9MB

    • MD5

      053b410e0f7fc23a563c7ec455b272c0

    • SHA1

      bf00425b674bcaae905e88c8dae028a9d7d2af93

    • SHA256

      8862c2052bc5ce19a6155a31d3e05c3fef9b87bccb390ead28f366781bbd22bc

    • SHA512

      393d4dcf94c1d4ddd2a89e542c535743ba6fee8f966716762fed0e828db2f26979c503093fc2cd9a8859481d6c8805280e0193ce2bd9ef565e4bb0bbfffa7b8c

    • SSDEEP

      49152:Lz071uv4BPMkyW10/w16BvZX71Fq86zU6:NABD

    Score
    10/10
    xmrigexecutionminerupxpersistenceprivilege_escalation

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks