Overview

overview

10

Static

static

3

miner-100%.exe

windows7-x64

10

miner-100%.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    miner-100%.exe

  • Size

    2.5MB

  • Sample

    241023-t5z9qszfpd

  • MD5

    0f03098ba3c106a018592bf8b4142cdc

  • SHA1

    1e5ea6614b07148173da9efaa4bfe87f978c6874

  • SHA256

    38e4ff6cd8509ed0b208a435067e5d4130e1febe786086769d46818ac8ab2657

  • SHA512

    cb5d2ce1fe41bd5f2994b15de2bdec3a48b0c98647794a84853ee2a95e8466bb8db2b1da22ed3dd51c0e77de818e206947fb069917480d562d0d293d9a8cd1ae

  • SSDEEP

    49152:Z07rDD13GoljEHtRoY+2HSeN4DMcV0jOG0YRyvVB:ZoDD12oaC2HSE4oC0jODYRyv

Score
10/10
xmrigevasionexecutionminerpersistenceupx

Malware Config

Targets

    • Target

      miner-100%.exe

    • Size

      2.5MB

    • MD5

      0f03098ba3c106a018592bf8b4142cdc

    • SHA1

      1e5ea6614b07148173da9efaa4bfe87f978c6874

    • SHA256

      38e4ff6cd8509ed0b208a435067e5d4130e1febe786086769d46818ac8ab2657

    • SHA512

      cb5d2ce1fe41bd5f2994b15de2bdec3a48b0c98647794a84853ee2a95e8466bb8db2b1da22ed3dd51c0e77de818e206947fb069917480d562d0d293d9a8cd1ae

    • SSDEEP

      49152:Z07rDD13GoljEHtRoY+2HSeN4DMcV0jOG0YRyvVB:ZoDD12oaC2HSE4oC0jODYRyv

    Score
    10/10
    xmrigevasionexecutionminerpersistenceupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks