Overview

overview

10

Static

static

10

872f14ebd3...0N.exe

windows7-x64

10

872f14ebd3...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    872f14ebd37d2f3a04c963eb1cc93510N.exe

  • Size

    1.9MB

  • Sample

    240814-j4b6ea1gqb

  • MD5

    872f14ebd37d2f3a04c963eb1cc93510

  • SHA1

    900228bfc37ebf9c5ae4059424b95db42acfd409

  • SHA256

    79df5f0b6bc5f3e5e3ed0cc44c706589c84328dd8350ae6eba856f86c8604053

  • SHA512

    771e701711506981ac9e36493e731d411b25648d83e0c95c9ce91be78d32a9dca2ea4f4b180c42cb92b7785221062c9db64ac89ffee684786cb2ee2814e38ca0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGZHKCuAqI8:NABg

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      872f14ebd37d2f3a04c963eb1cc93510N.exe

    • Size

      1.9MB

    • MD5

      872f14ebd37d2f3a04c963eb1cc93510

    • SHA1

      900228bfc37ebf9c5ae4059424b95db42acfd409

    • SHA256

      79df5f0b6bc5f3e5e3ed0cc44c706589c84328dd8350ae6eba856f86c8604053

    • SHA512

      771e701711506981ac9e36493e731d411b25648d83e0c95c9ce91be78d32a9dca2ea4f4b180c42cb92b7785221062c9db64ac89ffee684786cb2ee2814e38ca0

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5I4TNrpDGZHKCuAqI8:NABg

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks