Overview

overview

10

Static

static

10

98d653979f...eN.exe

windows7-x64

10

98d653979f...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98d653979f0e769560b38d28998d5f7f505e5ca1f7912f23ad984fec21ec0d2eN

  • Size

    1.9MB

  • Sample

    240919-gtgxsstgrd

  • MD5

    eb6e346ca740ffe492f6d6bbe6846540

  • SHA1

    a3f45adf80e3e91653b0e0a6f2569643b36bdbd7

  • SHA256

    98d653979f0e769560b38d28998d5f7f505e5ca1f7912f23ad984fec21ec0d2e

  • SHA512

    77172d258ae1920c20bbbfa777d1ab640b0e21bee5a53b58ad79dad6505c011896644d926c9785bd1371496aaadf10b6c6784083911892728d8fbbd6f3c3a174

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOZ9ZReBCs1VcvGYcgo04aG2c/+8Xg0FWdXGFSfWEh:knw9oUUEEDlOlR1dqgPgKtupq

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      98d653979f0e769560b38d28998d5f7f505e5ca1f7912f23ad984fec21ec0d2eN

    • Size

      1.9MB

    • MD5

      eb6e346ca740ffe492f6d6bbe6846540

    • SHA1

      a3f45adf80e3e91653b0e0a6f2569643b36bdbd7

    • SHA256

      98d653979f0e769560b38d28998d5f7f505e5ca1f7912f23ad984fec21ec0d2e

    • SHA512

      77172d258ae1920c20bbbfa777d1ab640b0e21bee5a53b58ad79dad6505c011896644d926c9785bd1371496aaadf10b6c6784083911892728d8fbbd6f3c3a174

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlOZ9ZReBCs1VcvGYcgo04aG2c/+8Xg0FWdXGFSfWEh:knw9oUUEEDlOlR1dqgPgKtupq

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks