Overview

overview

10

Static

static

10

ee9b45cc7a...ad.exe

windows7-x64

10

ee9b45cc7a...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee9b45cc7a9b48c039294b83dba670ca1d4356bcb65ace86a61a877676dad0ad

  • Size

    1.1MB

  • Sample

    240727-gaaz5ssgjb

  • MD5

    0aad79cc793596de7693580d94d4f1ef

  • SHA1

    a62f7d1484887219d87fb0b379f59ba783f13b8b

  • SHA256

    ee9b45cc7a9b48c039294b83dba670ca1d4356bcb65ace86a61a877676dad0ad

  • SHA512

    65792c62a005d517437c06fc76a5bb7ab3eca7fbd30e9f837a1c75f04969bc00ee761c6c2c2c555dacefd96c9f518faffcb52dc62a9badf25c93d160ff59199c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODoselrIpjwjURY0:knw9oUUEEDlGUrMAGpPT

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      ee9b45cc7a9b48c039294b83dba670ca1d4356bcb65ace86a61a877676dad0ad

    • Size

      1.1MB

    • MD5

      0aad79cc793596de7693580d94d4f1ef

    • SHA1

      a62f7d1484887219d87fb0b379f59ba783f13b8b

    • SHA256

      ee9b45cc7a9b48c039294b83dba670ca1d4356bcb65ace86a61a877676dad0ad

    • SHA512

      65792c62a005d517437c06fc76a5bb7ab3eca7fbd30e9f837a1c75f04969bc00ee761c6c2c2c555dacefd96c9f518faffcb52dc62a9badf25c93d160ff59199c

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODoselrIpjwjURY0:knw9oUUEEDlGUrMAGpPT

    Score
    10/10
    xmrigminerupxpersistenceprivilege_escalation

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Event Triggered Execution

1
T1546

Accessibility Features

1
T1546.008

Privilege Escalation

Event Triggered Execution

1
T1546

Accessibility Features

1
T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks