xmrig | a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39 | Triage

Submit
Reports

Overview

overview

Static

static

a8e6b4e5b8...39.exe

windows7-x64

a8e6b4e5b8...39.exe

windows10-2004-x64

Sharing

General

Target

a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39
Size

1.4MB
Sample

241118-2agsxawpcw
MD5

fba2ef950265cd7960e7b5b8fe07ef40
SHA1

8c5092e748631ddce921f4bbf0462c38d296672f
SHA256

a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39
SHA512

c7eb3a4729640443f1ffe7c55f882ab0a89bbded4a67fb0f3bbf8553fa72d0fde41afd938b001d4ae68b13f0f6a03bf1a22ee2fe7a226d171e2f852f43783556
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbc3:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5l

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39.exe

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39.exe

Resource

win10v2004-20241007-en

xmrig miner persistence privilege_escalation

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39
- Size
  
  1.4MB
- MD5
  
  fba2ef950265cd7960e7b5b8fe07ef40
- SHA1
  
  8c5092e748631ddce921f4bbf0462c38d296672f
- SHA256
  
  a8e6b4e5b836a7090158d364e0f8fa50d011aa9b7b1de74ccc568d707dba9d39
- SHA512
  
  c7eb3a4729640443f1ffe7c55f882ab0a89bbded4a67fb0f3bbf8553fa72d0fde41afd938b001d4ae68b13f0f6a03bf1a22ee2fe7a226d171e2f852f43783556
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbc3:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5l
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xmrigminerpersistenceprivilege_escalation

© 2018-2024

Terms | Privacy