xmrig | 6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09 | Triage

Submit
Reports

Overview

overview

Static

static

6fe406bca9...09.exe

windows7-x64

6fe406bca9...09.exe

windows10-2004-x64

Sharing

General

Target

6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09
Size

1.4MB
Sample

241111-3jmk7azara
MD5

909ee4f68db6ff97316f9e13eba26353
SHA1

6af711498c92f29d7edd2de8389ba60c8df36771
SHA256

6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09
SHA512

58a35cc9c51e0d51c0428d437736723d605bd186989dc0ce27172da2222112f7dc7ad70b07137e6cb54a69ed10effd80ec720a7ad840a4f59662de081ed6834f
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/51m6PbkqqaW:GezaTF8FcNkNdfE0pZ9ozttwIRx3/L9q

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09.exe

Resource

win7-20241010-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09
- Size
  
  1.4MB
- MD5
  
  909ee4f68db6ff97316f9e13eba26353
- SHA1
  
  6af711498c92f29d7edd2de8389ba60c8df36771
- SHA256
  
  6fe406bca9d2834d66798a49bbb719534dc9096ef5fd416d91af7813811c0a09
- SHA512
  
  58a35cc9c51e0d51c0428d437736723d605bd186989dc0ce27172da2222112f7dc7ad70b07137e6cb54a69ed10effd80ec720a7ad840a4f59662de081ed6834f
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/51m6PbkqqaW:GezaTF8FcNkNdfE0pZ9ozttwIRx3/L9q
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy