Overview

overview

10

Static

static

10

b6016cc3ea...0N.exe

windows7-x64

10

b6016cc3ea...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6016cc3eab1c47263753487b2e2e370N.exe

  • Size

    1.5MB

  • Sample

    240806-raecnsvdjb

  • MD5

    b6016cc3eab1c47263753487b2e2e370

  • SHA1

    6b9ba90ea8886c61138dde3c5df7080bd85815e4

  • SHA256

    2b272177d35fe0d7b70616015e51bdadb54a3b5eb919a642b9673c91b3087c91

  • SHA512

    beae91cde61f54dda9be65bb1b8dd890c00f4e7a2acd1751f399c6856a05061b0b85f2b136b4ce561e6e39d47a591de83af7e85c0ef0721640e14e2798dfa7e1

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S8Y:NABs

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      b6016cc3eab1c47263753487b2e2e370N.exe

    • Size

      1.5MB

    • MD5

      b6016cc3eab1c47263753487b2e2e370

    • SHA1

      6b9ba90ea8886c61138dde3c5df7080bd85815e4

    • SHA256

      2b272177d35fe0d7b70616015e51bdadb54a3b5eb919a642b9673c91b3087c91

    • SHA512

      beae91cde61f54dda9be65bb1b8dd890c00f4e7a2acd1751f399c6856a05061b0b85f2b136b4ce561e6e39d47a591de83af7e85c0ef0721640e14e2798dfa7e1

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S8Y:NABs

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks