Overview

overview

10

Static

static

10

3ea06f03a7...52.exe

windows7-x64

10

3ea06f03a7...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ea06f03a74f0f7443376fb35555171c4656912ece517ca8e2d3a5893b867c52.exe

  • Size

    1.3MB

  • Sample

    241119-ya273a1cjg

  • MD5

    d67579b6e5b3a9c10ae130fb475f27ce

  • SHA1

    b45953bade2749aeb93594a492fd7cfa183f2c42

  • SHA256

    3ea06f03a74f0f7443376fb35555171c4656912ece517ca8e2d3a5893b867c52

  • SHA512

    b82c3b7da42e2f0e5500439c88f74bdc152da849f6dda9ff7a58565358a9ca8e1d2f9fd74ff7d322d741c5af0df80784ee4ed4409f3b0f06ee511ab99c7e702a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7N4b:Lz071uv4BPMkibTIA5JnJ1y

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      3ea06f03a74f0f7443376fb35555171c4656912ece517ca8e2d3a5893b867c52.exe

    • Size

      1.3MB

    • MD5

      d67579b6e5b3a9c10ae130fb475f27ce

    • SHA1

      b45953bade2749aeb93594a492fd7cfa183f2c42

    • SHA256

      3ea06f03a74f0f7443376fb35555171c4656912ece517ca8e2d3a5893b867c52

    • SHA512

      b82c3b7da42e2f0e5500439c88f74bdc152da849f6dda9ff7a58565358a9ca8e1d2f9fd74ff7d322d741c5af0df80784ee4ed4409f3b0f06ee511ab99c7e702a

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7N4b:Lz071uv4BPMkibTIA5JnJ1y

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks