xmrig | 830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec | Triage

Submit
Reports

Overview

overview

Static

static

830d5df0da...ec.exe

windows7-x64

830d5df0da...ec.exe

windows10-2004-x64

Sharing

General

Target

830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec
Size

1.4MB
Sample

241121-a7ek9sxgnp
MD5

057da78ea7d8de00c5b338e24a61b86f
SHA1

56f18ecb889a3706e540f81e747d6f8a5cf0aa76
SHA256

830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec
SHA512

d200a076145ebda4f039586466f35570135ae2975433c9fbe54f07f3291b57d6575fd683e9b5ab59ee7432b080a72739944ac6535bbce7d153e7bff4a9d80c90
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5WrmzN5qlxJ:GezaTF8FcNkNdfE0pZ9ozttwIRxTzkxJ

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec.exe

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec.exe

Resource

win10v2004-20241007-en

xmrig miner persistence privilege_escalation

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec
- Size
  
  1.4MB
- MD5
  
  057da78ea7d8de00c5b338e24a61b86f
- SHA1
  
  56f18ecb889a3706e540f81e747d6f8a5cf0aa76
- SHA256
  
  830d5df0da2941372584f94acf781cb2b2b164ceeafba667227c36a335c3b1ec
- SHA512
  
  d200a076145ebda4f039586466f35570135ae2975433c9fbe54f07f3291b57d6575fd683e9b5ab59ee7432b080a72739944ac6535bbce7d153e7bff4a9d80c90
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5WrmzN5qlxJ:GezaTF8FcNkNdfE0pZ9ozttwIRxTzkxJ
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xmrigminerpersistenceprivilege_escalation

© 2018-2024

Terms | Privacy