Overview

overview

10

Static

static

10

22cbab07b9...0N.exe

windows7-x64

10

22cbab07b9...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22cbab07b966e197281f6fb9076c9a20N.exe

  • Size

    1.4MB

  • Sample

    240722-2qrcaatbkr

  • MD5

    22cbab07b966e197281f6fb9076c9a20

  • SHA1

    10468db6e45c9501fd518f06d45dd3bfad47feea

  • SHA256

    4d83153f4c51a8bb40051e0ec2e49239dfb983c15fb46c29544371583783d646

  • SHA512

    9aefc585d4874e1c06d1e8fbeef73c0ebc263a5092953f12b4909846727868fb302b3edb5694d00bf0a48758a8e34ad6eaba2ee1d5c1d9f647ee966afc4b0c34

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYL+t6kw2bPJ4fOgYo/Jsak:Lz071uv4BPMkibTIA5LDGTJ4fXsP

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      22cbab07b966e197281f6fb9076c9a20N.exe

    • Size

      1.4MB

    • MD5

      22cbab07b966e197281f6fb9076c9a20

    • SHA1

      10468db6e45c9501fd518f06d45dd3bfad47feea

    • SHA256

      4d83153f4c51a8bb40051e0ec2e49239dfb983c15fb46c29544371583783d646

    • SHA512

      9aefc585d4874e1c06d1e8fbeef73c0ebc263a5092953f12b4909846727868fb302b3edb5694d00bf0a48758a8e34ad6eaba2ee1d5c1d9f647ee966afc4b0c34

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYL+t6kw2bPJ4fOgYo/Jsak:Lz071uv4BPMkibTIA5LDGTJ4fXsP

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks