xmrig | 23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930 | Triage

Submit
Reports

Overview

overview

Static

static

23ed1a5f3e...0N.exe

windows7-x64

23ed1a5f3e...0N.exe

windows10-2004-x64

Sharing

General

Target

23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930N.exe
Size

1.5MB
Sample

241119-vt958stlhp
MD5

6c11e30d093336a478b10af21a37a870
SHA1

82f10d962e9ae58450b36c517f7ace8e7f72a42b
SHA256

23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930
SHA512

c79b2cc4b51adb96fc96741ad6502fadcec784cf3bba44b3a7ebf9d99b50c12c02ad031825ae21ffd02fca8236eb1bb44a71bb6fdf7622a5de735f20dccc9cbe
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlGC78XCej06sSv8rcbQyfUkjPLtiaJ8:knw9oUUEEDlGUrMjAkFid

Score

10^/10

xmrig miner persistence privilege_escalation upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930N.exe

Resource

win7-20240903-en

xmrig miner persistence privilege_escalation upx

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930N.exe

Resource

win10v2004-20241007-en

xmrig miner upx

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930N.exe
- Size
  
  1.5MB
- MD5
  
  6c11e30d093336a478b10af21a37a870
- SHA1
  
  82f10d962e9ae58450b36c517f7ace8e7f72a42b
- SHA256
  
  23ed1a5f3e3a8b5e9a2150abfe83ea6dc5d7b093e6bd0681fc8005de4c1ef930
- SHA512
  
  c79b2cc4b51adb96fc96741ad6502fadcec784cf3bba44b3a7ebf9d99b50c12c02ad031825ae21ffd02fca8236eb1bb44a71bb6fdf7622a5de735f20dccc9cbe
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlGC78XCej06sSv8rcbQyfUkjPLtiaJ8:knw9oUUEEDlGUrMjAkFid
Score

10^/10

xmrig miner persistence privilege_escalation upx
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalationupx

behavioral2

© 2018-2024

Terms | Privacy