Overview

overview

10

Static

static

3

SecuriteIn...61.exe

windows7-x64

10

SecuriteIn...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Win64.MalwareX-gen.11857.961.exe

  • Size

    10.3MB

  • Sample

    240807-qmsv6ayhkr

  • MD5

    27b14ad026da76c1111174c6b4ba6aba

  • SHA1

    e55a0aa823a6c91ec602d4e6f283b23858965a08

  • SHA256

    bef765aff3d916d8be504b604c0dc37afe3fd76260fe158508b778b5e4b85ddf

  • SHA512

    a4f682d6e047c5e3bafc5431d6ddc2a3d6decf47c14ef14ae3a9581cf669db5314bb19b7f9437b9236a28338472e94407dad7745465afb691ffce3548503624f

  • SSDEEP

    196608:tSiB9/zPAW0ILyawlf9Ul33DqL4zDefJglqYnkFTdl434Mfr:tX97fB6iXvkFTf4zj

Score
10/10
xmrigevasionexecutionminerpersistence

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win64.MalwareX-gen.11857.961.exe

    • Size

      10.3MB

    • MD5

      27b14ad026da76c1111174c6b4ba6aba

    • SHA1

      e55a0aa823a6c91ec602d4e6f283b23858965a08

    • SHA256

      bef765aff3d916d8be504b604c0dc37afe3fd76260fe158508b778b5e4b85ddf

    • SHA512

      a4f682d6e047c5e3bafc5431d6ddc2a3d6decf47c14ef14ae3a9581cf669db5314bb19b7f9437b9236a28338472e94407dad7745465afb691ffce3548503624f

    • SSDEEP

      196608:tSiB9/zPAW0ILyawlf9Ul33DqL4zDefJglqYnkFTdl434Mfr:tX97fB6iXvkFTf4zj

    Score
    10/10
    xmrigevasionexecutionminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks