Overview

overview

10

Static

static

10

dae79a102d...3e.exe

windows7-x64

10

dae79a102d...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dae79a102df6567ebfd911d1580d1ee86d33fe2fd7c53ebed0839e9a3dcd7e3e

  • Size

    1.6MB

  • Sample

    241118-gh87xazdmc

  • MD5

    dd9ccb02ae6a2de752f3cc62a492ce1a

  • SHA1

    1012e5a8adab1b2b594c715111790b6f24b1f1e7

  • SHA256

    dae79a102df6567ebfd911d1580d1ee86d33fe2fd7c53ebed0839e9a3dcd7e3e

  • SHA512

    b7025022482eaf42dc27e82a437515797d92a46468b09725fbe7a0be9e831d15dde4c6fe412fd5d84c50307bdd20057a386e2995bc820163f1dadb9b8c586961

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZb5:GemTLkNdfE0pZy3

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      dae79a102df6567ebfd911d1580d1ee86d33fe2fd7c53ebed0839e9a3dcd7e3e

    • Size

      1.6MB

    • MD5

      dd9ccb02ae6a2de752f3cc62a492ce1a

    • SHA1

      1012e5a8adab1b2b594c715111790b6f24b1f1e7

    • SHA256

      dae79a102df6567ebfd911d1580d1ee86d33fe2fd7c53ebed0839e9a3dcd7e3e

    • SHA512

      b7025022482eaf42dc27e82a437515797d92a46468b09725fbe7a0be9e831d15dde4c6fe412fd5d84c50307bdd20057a386e2995bc820163f1dadb9b8c586961

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZb5:GemTLkNdfE0pZy3

    Score
    10/10
    xmrigminerpersistence

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks