Overview

overview

10

Static

static

3

Test - Copy (3).exe

windows10-2004-x64

10

Test - Copy (4).exe

windows10-2004-x64

10

Test - Copy.exe

windows10-2004-x64

10

Test.exe

windows10-2004-x64

10

Test2 - Copy (2).exe

windows10-2004-x64

10

Test2 - Copy (3).exe

windows10-2004-x64

10

Test2 - Copy (4).exe

windows10-2004-x64

10

Test2 - Copy.exe

windows10-2004-x64

10

Test2.exe

windows10-2004-x64

10

Test3 - Copy (2).exe

windows10-2004-x64

10

Test3 - Copy (3).exe

windows10-2004-x64

10

Test3 - Copy (4).exe

windows10-2004-x64

10

Test3 - Copy.exe

windows10-2004-x64

10

Test3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Triage-15.rar

  • Size

    55.5MB

  • Sample

    241117-ptgk2azfrj

  • MD5

    656aa63f75187eea8318e1b07b2ffd83

  • SHA1

    9339f333cfcc8ce7036660d624f2282faf01a00d

  • SHA256

    6da928825b398de172fc644bb860970aac16279294202edff298f9843acab84c

  • SHA512

    911ef4b74ae29bec5b263c3efaa8e218daebf6c091baaa2c2f88ec787282e6e340fa8b7cc3dd40f9c4f3093c3170c2a6fb507a7a4c5899f735398f455ea3bab4

  • SSDEEP

    1572864:JvmZvmTvm7vmZvmSvmivmAvmKvm2vmLvmLvmEvmKvmK:gwaiwLbZD/yydDK

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      Test - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      Test - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral2

    • Target

      Test - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3

    • Target

      Test.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral4

    • Target

      Test2 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5

    • Target

      Test2 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral6

    • Target

      Test2 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7

    • Target

      Test2 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral8

    • Target

      Test2.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral9

    • Target

      Test3 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10

    • Target

      Test3 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11

    • Target

      Test3 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral12

    • Target

      Test3 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13

    • Target

      Test3.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral14

MITRE ATT&CK Matrix

Tasks