Overview

overview

10

Static

static

3

123p.exe

windows7-x64

10

123p.exe

windows10-2004-x64

10

123p.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    123p.exe

  • Size

    10.1MB

  • Sample

    240711-pkb9yswcqm

  • MD5

    3b24971c5fef776db7df10a769f0857a

  • SHA1

    ab314ddf208ef3e8d06f2f5e96f0f481075de0f4

  • SHA256

    0d990bedac4696a67ad46dbc686750086f72f4795ed8a6121782ba3b0dc736b5

  • SHA512

    f70dccd6fd95516eac21b0cc30c70fb5f17c3c8f1f3b28fe3bdaec6053c2de53daf68caf422dea8861e4ab84f3dd7be36965c6998c1380dbf2a05a2a74b36b28

  • SSDEEP

    196608:7PyWqZApuYuBDhM7GsHkE5j5hKAbsZ2i0zdKRVZ6FspAE5EFH73AUYR:7aWNRuBDZsEChnK2VziVZdu3h8

Score
10/10
xmrigevasionexecutionminerpersistence

Malware Config

Targets

    • Target

      123p.exe

    • Size

      10.1MB

    • MD5

      3b24971c5fef776db7df10a769f0857a

    • SHA1

      ab314ddf208ef3e8d06f2f5e96f0f481075de0f4

    • SHA256

      0d990bedac4696a67ad46dbc686750086f72f4795ed8a6121782ba3b0dc736b5

    • SHA512

      f70dccd6fd95516eac21b0cc30c70fb5f17c3c8f1f3b28fe3bdaec6053c2de53daf68caf422dea8861e4ab84f3dd7be36965c6998c1380dbf2a05a2a74b36b28

    • SSDEEP

      196608:7PyWqZApuYuBDhM7GsHkE5j5hKAbsZ2i0zdKRVZ6FspAE5EFH73AUYR:7aWNRuBDZsEChnK2VziVZdu3h8

    Score
    10/10
    xmrigevasionexecutionminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks