xmrig | 4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94 | Triage

Submit
Reports

Overview

overview

Static

static

4578d6a699...94.exe

windows7-x64

4578d6a699...94.exe

windows10-2004-x64

Sharing

General

Target

4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94
Size

1.3MB
Sample

241111-1q7htsxfjg
MD5

b7c1823feb889745cdb87d3bef6f9dce
SHA1

bb9b252967cfeaef48a3034881c9c609981944dc
SHA256

4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94
SHA512

5f5213f09dcac55dfe82962bb8e8c0e1eea497cebcbce1ba8efc50eabad62daf163f0fc042187b94aa85996e09a4bdd9500b8bceb914b87b825c7e47f37ebc44
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph70Vwn1WT:GezaTF8FcNkNdfE0pZ9ozttwIRx2VGu1

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94.exe

Resource

win7-20240903-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94
- Size
  
  1.3MB
- MD5
  
  b7c1823feb889745cdb87d3bef6f9dce
- SHA1
  
  bb9b252967cfeaef48a3034881c9c609981944dc
- SHA256
  
  4578d6a6997f2853f6419e8d33f38dd6a9d1c9b4757e99e0d55bb96c55759c94
- SHA512
  
  5f5213f09dcac55dfe82962bb8e8c0e1eea497cebcbce1ba8efc50eabad62daf163f0fc042187b94aa85996e09a4bdd9500b8bceb914b87b825c7e47f37ebc44
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph70Vwn1WT:GezaTF8FcNkNdfE0pZ9ozttwIRx2VGu1
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy