Overview

overview

10

Static

static

10

0cb6e2d4f7...bb.exe

windows7-x64

10

0cb6e2d4f7...bb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cb6e2d4f76d08a013fb7a13bf65507f0ad5a23b1aa09b457a74213a87de96bb

  • Size

    2.7MB

  • Sample

    240727-xfb3dswgqh

  • MD5

    22ffe1549fc49c10a691411c6efb967c

  • SHA1

    bc9118111b0c48731a165cb3257f5f554a2fba89

  • SHA256

    0cb6e2d4f76d08a013fb7a13bf65507f0ad5a23b1aa09b457a74213a87de96bb

  • SHA512

    93f9befd04593f73c87a6b1e773f67d568faa1f26f2f673df5e8200b906be1e524e7000c7481d2d5b09948d2312bb963e5e6e5f71b389eac08c19f5db1b23c14

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9ctYVk6CY:w0GnJMOWPClFdx6e0EALKWVTffZiPAcw

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      0cb6e2d4f76d08a013fb7a13bf65507f0ad5a23b1aa09b457a74213a87de96bb

    • Size

      2.7MB

    • MD5

      22ffe1549fc49c10a691411c6efb967c

    • SHA1

      bc9118111b0c48731a165cb3257f5f554a2fba89

    • SHA256

      0cb6e2d4f76d08a013fb7a13bf65507f0ad5a23b1aa09b457a74213a87de96bb

    • SHA512

      93f9befd04593f73c87a6b1e773f67d568faa1f26f2f673df5e8200b906be1e524e7000c7481d2d5b09948d2312bb963e5e6e5f71b389eac08c19f5db1b23c14

    • SSDEEP

      49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9ctYVk6CY:w0GnJMOWPClFdx6e0EALKWVTffZiPAcw

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks