Overview

overview

10

Static

static

3

Triage-12/...2).exe

windows7-x64

10

Triage-12/...2).exe

windows10-2004-x64

10

Triage-12/...3).exe

windows7-x64

10

Triage-12/...3).exe

windows10-2004-x64

10

Triage-12/...4).exe

windows7-x64

10

Triage-12/...4).exe

windows10-2004-x64

10

Triage-12/...5).exe

windows7-x64

10

Triage-12/...5).exe

windows10-2004-x64

10

Triage-12/...py.exe

windows7-x64

10

Triage-12/...py.exe

windows10-2004-x64

10

Triage-12/...2).exe

windows7-x64

10

Triage-12/...2).exe

windows10-2004-x64

10

Triage-12/...3).exe

windows7-x64

10

Triage-12/...3).exe

windows10-2004-x64

10

Triage-12/...4).exe

windows7-x64

10

Triage-12/...4).exe

windows10-2004-x64

10

Triage-12/...5).exe

windows7-x64

10

Triage-12/...5).exe

windows10-2004-x64

10

Triage-12/...py.exe

windows7-x64

10

Triage-12/...py.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Triage-12.7z

  • Size

    4.0MB

  • Sample

    241117-n5rppszbrq

  • MD5

    e94654916238c253b4742d426f29657a

  • SHA1

    a238d5df7953826597ca03393af499767c861ae4

  • SHA256

    ab115c58435b0c654c9bffe63b935390c5fe9a702e0c72583829796260e6f3fb

  • SHA512

    ca08ab70af5e3f26f2f95919332df09801c888ee21b8cc5e12188ca380790280dfc2377e4a1dcde619cdfb4ece82ca5b51aea8ff7ccca3354c7f5a322081a8c2

  • SSDEEP

    98304:0qaZRRZOugUI/ZHPPTwxk/LFGaf1ZeFsF70UaRLDdoRF:0qQz4uL2vcUFGaf6sF78in

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      Triage-12/Test - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      Triage-12/Test - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      Triage-12/Test - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5behavioral6

    • Target

      Triage-12/Test - Copy (5).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      Triage-12/Test - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      Triage-12/Test2 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      Triage-12/Test2 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

    • Target

      Triage-12/Test2 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      Triage-12/Test2 - Copy (5).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

    • Target

      Triage-12/Test2 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks