Overview

overview

10

Static

static

3

R6-Free.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    R6-Free.exe

  • Size

    63.2MB

  • Sample

    240925-xfhj6s1eqk

  • MD5

    147899aaaad237277c4d89c5cfbccb60

  • SHA1

    5143b6bbf0997f7e4c51ac12e82b733fc8ea3617

  • SHA256

    005906d55275d05b555407d748438773569ffcf81a2b9b70189a84235a363feb

  • SHA512

    c322c39354b4cfa2fd9a2230cfffe75551b4cfcfe9b1bafa84fb9f041e88b29d6e4efd028d1a2faf36f94b20a53a457f4083528758e42a7e1e603cbb7a8a8f32

  • SSDEEP

    1572864:gL6aN8uj3MFcc6Od6KoXs0iC12sWbvGsaQnzwv3PGB:GeSXOuXHiCgsivG9QAPG

Score
10/10
xmrigdefense_evasiondiscoveryminerupx

Malware Config

Targets

    • Target

      R6-Free.exe

    • Size

      63.2MB

    • MD5

      147899aaaad237277c4d89c5cfbccb60

    • SHA1

      5143b6bbf0997f7e4c51ac12e82b733fc8ea3617

    • SHA256

      005906d55275d05b555407d748438773569ffcf81a2b9b70189a84235a363feb

    • SHA512

      c322c39354b4cfa2fd9a2230cfffe75551b4cfcfe9b1bafa84fb9f041e88b29d6e4efd028d1a2faf36f94b20a53a457f4083528758e42a7e1e603cbb7a8a8f32

    • SSDEEP

      1572864:gL6aN8uj3MFcc6Od6KoXs0iC12sWbvGsaQnzwv3PGB:GeSXOuXHiCgsivG9QAPG

    Score
    10/10
    xmrigdefense_evasiondiscoveryminerupx

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks