Overview

overview

10

Static

static

3

962e9a7e39...a0.exe

windows7-x64

10

962e9a7e39...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    962e9a7e391ed22b6567bc43ea2e2e9e8e8750601562a8356ffcb15c649a3ca0.exe

  • Size

    2.5MB

  • Sample

    240709-wvc3kazake

  • MD5

    00a69916c649b8f347552f045d9529ef

  • SHA1

    834062535c07857f99732e009358373a9321036a

  • SHA256

    962e9a7e391ed22b6567bc43ea2e2e9e8e8750601562a8356ffcb15c649a3ca0

  • SHA512

    423bc39fcdeeb56ed1449191bcc96607cbd43652ec2589cb810055d48db4769d8789001383b9db95beb36744b38057537e0a8bcff999874dd69c4b18c21b9172

  • SSDEEP

    49152:MBeicQuxzs62GFUQsRALUKbtr4y8X2GcIqHwE2:MBeXxYAcAL5r4y8XqwE

Score
10/10
xmrigevasionexecutionminerpersistenceupx

Malware Config

Targets

    • Target

      962e9a7e391ed22b6567bc43ea2e2e9e8e8750601562a8356ffcb15c649a3ca0.exe

    • Size

      2.5MB

    • MD5

      00a69916c649b8f347552f045d9529ef

    • SHA1

      834062535c07857f99732e009358373a9321036a

    • SHA256

      962e9a7e391ed22b6567bc43ea2e2e9e8e8750601562a8356ffcb15c649a3ca0

    • SHA512

      423bc39fcdeeb56ed1449191bcc96607cbd43652ec2589cb810055d48db4769d8789001383b9db95beb36744b38057537e0a8bcff999874dd69c4b18c21b9172

    • SSDEEP

      49152:MBeicQuxzs62GFUQsRALUKbtr4y8X2GcIqHwE2:MBeXxYAcAL5r4y8XqwE

    Score
    10/10
    xmrigevasionexecutionminerpersistenceupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks