Overview

overview

10

Static

static

10

3003022228...0N.exe

windows7-x64

10

3003022228...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3003022228ebfcffae794b77a9cb0f10N.exe

  • Size

    1.7MB

  • Sample

    240724-blcp8azapk

  • MD5

    3003022228ebfcffae794b77a9cb0f10

  • SHA1

    56e45fedbc62e7d9082a395464b4e8a1529456b2

  • SHA256

    64e643ae0dd270b4faebdfb6b25c686aefc2dd775362cbb6b713bb285017b7b9

  • SHA512

    90eba18ce7face4ca75e65892acb3076e56d2247401eb27cf6ff07ce5c88642cf8b7b93eaea5afe6686b553b596b32e1931106e447a5b985aa28f7e4c697db24

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SIuYe:NAB0

Score
10/10
xmrigdiscoveryexecutionminerupx

Malware Config

Targets

    • Target

      3003022228ebfcffae794b77a9cb0f10N.exe

    • Size

      1.7MB

    • MD5

      3003022228ebfcffae794b77a9cb0f10

    • SHA1

      56e45fedbc62e7d9082a395464b4e8a1529456b2

    • SHA256

      64e643ae0dd270b4faebdfb6b25c686aefc2dd775362cbb6b713bb285017b7b9

    • SHA512

      90eba18ce7face4ca75e65892acb3076e56d2247401eb27cf6ff07ce5c88642cf8b7b93eaea5afe6686b553b596b32e1931106e447a5b985aa28f7e4c697db24

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SIuYe:NAB0

    Score
    10/10
    xmrigdiscoveryexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks