xmrig | fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae | Triage

Submit
Reports

Overview

overview

Static

static

fa6e1548ee...ae.exe

windows7-x64

fa6e1548ee...ae.exe

windows10-2004-x64

Sharing

General

Target

fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae
Size

1.4MB
Sample

241117-mz62rsydnl
MD5

6d4dcd6aabfe4f601c18b08712124a00
SHA1

5edac70087062c3b23b74fb76158fd992ddf8b48
SHA256

fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae
SHA512

c0c1d88186e54adc3696d1fbb76f00f2470defb19e66322073f1daadb6aeb1ef27d303727c5b4b70b007b8ff066679588d9bb022bead8926ec05127194dc296e
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcM:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c52

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae.exe

Resource

win7-20241010-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae
- Size
  
  1.4MB
- MD5
  
  6d4dcd6aabfe4f601c18b08712124a00
- SHA1
  
  5edac70087062c3b23b74fb76158fd992ddf8b48
- SHA256
  
  fa6e1548ee4d2ce001c86ecb3af157c23fc8453bcf9317aee9ad96700a206dae
- SHA512
  
  c0c1d88186e54adc3696d1fbb76f00f2470defb19e66322073f1daadb6aeb1ef27d303727c5b4b70b007b8ff066679588d9bb022bead8926ec05127194dc296e
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcM:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c52
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy