Overview

overview

10

Static

static

10

011d727a05...0N.exe

windows7-x64

10

011d727a05...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    011d727a055786c3641f62ac70a9d1b0N.exe

  • Size

    2.0MB

  • Sample

    240805-zej3qaxflm

  • MD5

    011d727a055786c3641f62ac70a9d1b0

  • SHA1

    b3f87ef3f0130d5ee0c08f7b9467223d2eddad47

  • SHA256

    f5aa9ed12062aa6149e85feda6c9f65cf3eed2c77b28cfadaf369fd7913b44b4

  • SHA512

    62b2634d50521f4bba9db3d8d229fced88e468614733935fb195ff5b001838a8fd4311456798059d80b0c9eb701fabe92c77bda5c9b1efe609b3ab7c87e11fbf

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PToux:NABh

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      011d727a055786c3641f62ac70a9d1b0N.exe

    • Size

      2.0MB

    • MD5

      011d727a055786c3641f62ac70a9d1b0

    • SHA1

      b3f87ef3f0130d5ee0c08f7b9467223d2eddad47

    • SHA256

      f5aa9ed12062aa6149e85feda6c9f65cf3eed2c77b28cfadaf369fd7913b44b4

    • SHA512

      62b2634d50521f4bba9db3d8d229fced88e468614733935fb195ff5b001838a8fd4311456798059d80b0c9eb701fabe92c77bda5c9b1efe609b3ab7c87e11fbf

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PToux:NABh

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks