Overview

overview

10

Static

static

3

2024-11-19...im.exe

windows7-x64

7

2024-11-19...im.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-19_ba88b24a04173ea75c436dee3b394975_magniber_nymaim

  • Size

    3.1MB

  • Sample

    241119-ptl6hswjfw

  • MD5

    ba88b24a04173ea75c436dee3b394975

  • SHA1

    bdd9e32cf205c1135bcc7a2453dda08cbbfc666e

  • SHA256

    b96e81b936927a165c12f9752aa25a7753ab1ce2d429374b585512090031d853

  • SHA512

    a0c706c8ffe8d8d5b2c44e7fa334df5324304444b97a0693cf7b3ca67add8fbb11c78522559797c9411dbb94b87ada4febc63766783335d0589e0167b9586864

  • SSDEEP

    49152:FMDRZ9IBVL+s0ezJGd80SHMsThF35Hj1BzuAhcEC1Xoe:FMDtIXLr06AdfEThF35PzuacEQD

Score
10/10
xmrigdefense_evasiondiscoveryexecutionminerpyinstaller

Malware Config

Targets

    • Target

      2024-11-19_ba88b24a04173ea75c436dee3b394975_magniber_nymaim

    • Size

      3.1MB

    • MD5

      ba88b24a04173ea75c436dee3b394975

    • SHA1

      bdd9e32cf205c1135bcc7a2453dda08cbbfc666e

    • SHA256

      b96e81b936927a165c12f9752aa25a7753ab1ce2d429374b585512090031d853

    • SHA512

      a0c706c8ffe8d8d5b2c44e7fa334df5324304444b97a0693cf7b3ca67add8fbb11c78522559797c9411dbb94b87ada4febc63766783335d0589e0167b9586864

    • SSDEEP

      49152:FMDRZ9IBVL+s0ezJGd80SHMsThF35Hj1BzuAhcEC1Xoe:FMDtIXLr06AdfEThF35PzuacEQD

    Score
    10/10
    discoveryxmrigdefense_evasionexecutionminerpyinstaller

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks