xmrig | 2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8 | Triage

Submit
Reports

Overview

overview

Static

static

2cd03e8a49...b8.exe

windows7-x64

2cd03e8a49...b8.exe

windows10-2004-x64

Sharing

General

Target

2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8
Size

1.4MB
Sample

241119-zjkj2sscjd
MD5

47ce621dd5577d56cada57484e6e3202
SHA1

7a1ec7f870773bb535e9f2921b2422b8b4570881
SHA256

2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8
SHA512

a8ce374a9a3eae18909924c9ebbc33179db7a496349322809477e60c26f7a301baf8781c68cd46f1cdbad7e2b5ad93f51860485435bbb682bc14fec1972dfaee
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbc+:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5Q

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8.exe

Resource

win7-20240903-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8
- Size
  
  1.4MB
- MD5
  
  47ce621dd5577d56cada57484e6e3202
- SHA1
  
  7a1ec7f870773bb535e9f2921b2422b8b4570881
- SHA256
  
  2cd03e8a49f70890897a3312daa9a8a8146964b5cd31a3001fa2eecc81de62b8
- SHA512
  
  a8ce374a9a3eae18909924c9ebbc33179db7a496349322809477e60c26f7a301baf8781c68cd46f1cdbad7e2b5ad93f51860485435bbb682bc14fec1972dfaee
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbc+:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5Q
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy