Overview

overview

10

Static

static

10

72f5d996be...0N.exe

windows7-x64

10

72f5d996be...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    72f5d996bebec1d4e4ca396de7ab35a0N.exe

  • Size

    1.7MB

  • Sample

    240821-13nlgsxbml

  • MD5

    72f5d996bebec1d4e4ca396de7ab35a0

  • SHA1

    1cb485aa1a004eb06199e1b936505f7e63f1b953

  • SHA256

    ac481e41c8b4772454f2ae818b8069854b6919fe9c799e90ef48e4d394d9ac47

  • SHA512

    f4c750885e56e0ee937b1a313445b71668360d781d59c8342aa2c71d7071159757df146721969420358cf0bb2fc4002d95a4c6b3e910f204172d3073e99f2504

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0oK2ggETIy0:knw9oUUEEDlnd+XRqJZwTKjnp7

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      72f5d996bebec1d4e4ca396de7ab35a0N.exe

    • Size

      1.7MB

    • MD5

      72f5d996bebec1d4e4ca396de7ab35a0

    • SHA1

      1cb485aa1a004eb06199e1b936505f7e63f1b953

    • SHA256

      ac481e41c8b4772454f2ae818b8069854b6919fe9c799e90ef48e4d394d9ac47

    • SHA512

      f4c750885e56e0ee937b1a313445b71668360d781d59c8342aa2c71d7071159757df146721969420358cf0bb2fc4002d95a4c6b3e910f204172d3073e99f2504

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0oK2ggETIy0:knw9oUUEEDlnd+XRqJZwTKjnp7

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks