Overview

overview

10

Static

static

5

bf80f63c26...db.exe

windows7-x64

10

bf80f63c26...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe

  • Size

    3.1MB

  • Sample

    241121-fmn7vstlel

  • MD5

    a6dd2148993cc41611ff86c1d2d98835

  • SHA1

    c6508eb18f49b876443d522fa5843e99a8235a43

  • SHA256

    bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db

  • SHA512

    6175da213b23e9f5e335dcfb87f0e7d9397055bb11a7789030300681ccaff88b4faf10b8ee3dd3b9b70cd7d7f95eb62846f1071db7729c906c2d7c702bcbf8a5

  • SSDEEP

    98304:qjq3foL7znvMlkLmLff2KFcAOfGDFGLDKewMUXOapNwIZE2WT:5fuvEl4mLXtFcAAKKDnwBuXvT

Score
10/10
xmrigdiscoveryminerupx

Malware Config

Targets

    • Target

      bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db.exe

    • Size

      3.1MB

    • MD5

      a6dd2148993cc41611ff86c1d2d98835

    • SHA1

      c6508eb18f49b876443d522fa5843e99a8235a43

    • SHA256

      bf80f63c2622d84f1eb12031521e232193c38e0b9fb6d0ac0919b8de8f0241db

    • SHA512

      6175da213b23e9f5e335dcfb87f0e7d9397055bb11a7789030300681ccaff88b4faf10b8ee3dd3b9b70cd7d7f95eb62846f1071db7729c906c2d7c702bcbf8a5

    • SSDEEP

      98304:qjq3foL7znvMlkLmLff2KFcAOfGDFGLDKewMUXOapNwIZE2WT:5fuvEl4mLXtFcAAKKDnwBuXvT

    Score
    10/10
    xmrigdiscoveryminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks