xmrig | dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0 | Triage

Submit
Reports

Overview

overview

Static

static

dba37021e2...f0.exe

windows7-x64

dba37021e2...f0.exe

windows10-2004-x64

Sharing

General

Target

dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0
Size

902KB
Sample

240724-ebmzzswgnl
MD5

6306e6a381b1c4a7d1157044e4b21550
SHA1

89ee9fd956f9ab0d00684521a4119420bb41c9f1
SHA256

dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0
SHA512

9c7d61b778affcbd6c9f99381cc7ea82c5d6b01087208b028fdda408bbd7954acc781522d41538f4af2d4e7ff2d7f07f3cec597c21855330ef98215e177154fc
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlOqzJO0RS/9v:knw9oUUEEDlOuJe9v

Score

10^/10

xmrig miner persistence privilege_escalation upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0.exe

Resource

win7-20240705-en

xmrig miner upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0.exe

Resource

win10v2004-20240709-en

xmrig miner persistence privilege_escalation upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0
- Size
  
  902KB
- MD5
  
  6306e6a381b1c4a7d1157044e4b21550
- SHA1
  
  89ee9fd956f9ab0d00684521a4119420bb41c9f1
- SHA256
  
  dba37021e2886ae7e4288a024059287f13df5f973f7bd9d9c0d93b288e5efaf0
- SHA512
  
  9c7d61b778affcbd6c9f99381cc7ea82c5d6b01087208b028fdda408bbd7954acc781522d41538f4af2d4e7ff2d7f07f3cec597c21855330ef98215e177154fc
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlOqzJO0RS/9v:knw9oUUEEDlOuJe9v
Score

10^/10

xmrig miner upx persistence privilege_escalation
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xmrigminerpersistenceprivilege_escalationupx

© 2018-2024

Terms | Privacy