Overview

overview

10

Static

static

10

51f6a0a8e0...27.exe

windows7-x64

10

51f6a0a8e0...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51f6a0a8e05fb21c1a83125ca3150df641ffa90aab76225f4d28da3dc7336827

  • Size

    1.4MB

  • Sample

    241114-1y4rxatfrb

  • MD5

    5b179e95b402810bab90456876251914

  • SHA1

    c436d4c6b87ce6f2a74d02c3e3e335e6aab2eb38

  • SHA256

    51f6a0a8e05fb21c1a83125ca3150df641ffa90aab76225f4d28da3dc7336827

  • SHA512

    1e08b4329f2e7b16b78275f24ac34db52daf9a02a4da88f28efa2b7dc88b7aa982b5119250aca289bfbe096a7ea25368eaf40212a60e84c35d7e2417e77dbc07

  • SSDEEP

    24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph7NAmE25m:GezaTF8FcNkNdfE0pZ9ozttwIRxHTS5

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      51f6a0a8e05fb21c1a83125ca3150df641ffa90aab76225f4d28da3dc7336827

    • Size

      1.4MB

    • MD5

      5b179e95b402810bab90456876251914

    • SHA1

      c436d4c6b87ce6f2a74d02c3e3e335e6aab2eb38

    • SHA256

      51f6a0a8e05fb21c1a83125ca3150df641ffa90aab76225f4d28da3dc7336827

    • SHA512

      1e08b4329f2e7b16b78275f24ac34db52daf9a02a4da88f28efa2b7dc88b7aa982b5119250aca289bfbe096a7ea25368eaf40212a60e84c35d7e2417e77dbc07

    • SSDEEP

      24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph7NAmE25m:GezaTF8FcNkNdfE0pZ9ozttwIRxHTS5

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks