xmrig | ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38 | Triage

Submit
Reports

Overview

overview

Static

static

ef707bef74...38.exe

windows7-x64

ef707bef74...38.exe

windows10-2004-x64

Sharing

General

Target

ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38
Size

1.6MB
Sample

241120-f59lhssfqr
MD5

79bac6800be692a08e8cbac26e16104b
SHA1

4776df739be0edd395f7fbe429fb19f5fbfcda4b
SHA256

ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38
SHA512

34a35e3ab9f264a9056e732412b09194783c96541cb21b08c1419859b9cf9367bc90ec678b2c3a74b2fd8b72ec0ace32a268aacb7202a5aead5b36e4a8bb3468
SSDEEP

49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQmnVwYf6:GemTLkNdfE0pZys

Score

10^/10

xmrig discovery miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38.exe

Resource

win7-20241010-en

xmrig discovery miner persistence privilege_escalation

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38
- Size
  
  1.6MB
- MD5
  
  79bac6800be692a08e8cbac26e16104b
- SHA1
  
  4776df739be0edd395f7fbe429fb19f5fbfcda4b
- SHA256
  
  ef707bef74095a42be0e4471c4dd9339cf49e053aa8ae537afd1c0e23e127b38
- SHA512
  
  34a35e3ab9f264a9056e732412b09194783c96541cb21b08c1419859b9cf9367bc90ec678b2c3a74b2fd8b72ec0ace32a268aacb7202a5aead5b36e4a8bb3468
- SSDEEP
  
  49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQmnVwYf6:GemTLkNdfE0pZys
Score

10^/10

xmrig discovery miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigdiscoveryminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy