Overview

overview

10

Static

static

10

ba83623e89...9N.exe

windows7-x64

10

ba83623e89...9N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba83623e89eaa6b4caf04698dfa76d483a4b01b2e19e7cef03c0a8c9b4e747e9N

  • Size

    1.5MB

  • Sample

    240927-tvzv8atdne

  • MD5

    bfae6f48412be3367636af05b19e2e00

  • SHA1

    4da0651ce337fe7729e8504a2692f78393dd9628

  • SHA256

    ba83623e89eaa6b4caf04698dfa76d483a4b01b2e19e7cef03c0a8c9b4e747e9

  • SHA512

    da23aedbd2e9cd1c1c2bab5fd99cadc553ce530a85e4491064e081c58fe9bea731026bcf7f565f0026870412a88f27021a7de9aeb2f9f20c4dcaeecda9104e7c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqdt3/mbq5P1uU9FhW3N2I:knw9oUUEEDl37jcqdt3uwMNL

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      ba83623e89eaa6b4caf04698dfa76d483a4b01b2e19e7cef03c0a8c9b4e747e9N

    • Size

      1.5MB

    • MD5

      bfae6f48412be3367636af05b19e2e00

    • SHA1

      4da0651ce337fe7729e8504a2692f78393dd9628

    • SHA256

      ba83623e89eaa6b4caf04698dfa76d483a4b01b2e19e7cef03c0a8c9b4e747e9

    • SHA512

      da23aedbd2e9cd1c1c2bab5fd99cadc553ce530a85e4491064e081c58fe9bea731026bcf7f565f0026870412a88f27021a7de9aeb2f9f20c4dcaeecda9104e7c

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqdt3/mbq5P1uU9FhW3N2I:knw9oUUEEDl37jcqdt3uwMNL

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks