General

  • Target

    Triage-32.7z

  • Size

    11.9MB

  • Sample

    241121-m6qncs1crc

  • MD5

    2c15896d1d4368b417a6c96afade7963

  • SHA1

    44f75c5f9243905fa5ffdd4a02745818187c0ba0

  • SHA256

    834dc77bde2ef5838592e137c097553696b7358fe1956465a7417f5681308065

  • SHA512

    97e592e1153bc312dff6febd162153ebcddd6e2216b46840705cd97e2948d7111594945ef57e5f8ca13c56e7678479859d3b45a14fb23841c6a8aa0626128c24

  • SSDEEP

    196608:NqQz4uL2vcUFGaf6sF78iTEEYCblxkTeOIJEPkqUTGrF0J5DMeelasK6:kQzhivdQs+OEewItPGrYJMTasK6

Score
10/10

Malware Config

Targets

    • Target

      Triage-32/Test - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test2 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test2 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test2 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test2 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test2.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test3 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test3 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test3 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test3 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test3.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test4 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test4 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test4 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test4 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test4.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test5 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test5 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    N/A
    • Target

      Triage-32/Test5 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test5 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test5.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test6 - Copy (2).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test6 - Copy (3).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test6 - Copy (4).exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test6 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test6.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test7 - Copy.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Triage-32/Test7.exe

    • Size

      4.9MB

    • MD5

      8136f991544b48f3f64764ecb8eb7ecb

    • SHA1

      81151ada9288fde410a14254554c124ba553cba1

    • SHA256

      bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b

    • SHA512

      d6703707503014bc90ed52eccad9f4e96d4eae06895975d6c8d66f77f1d1158043cd15bbfb55e0dabfcda2363d7109c25e7b3aa131a4faf5c784e1945d2530fd

    • SSDEEP

      98304:BDc6nwsaESMplY63OEVf8J9p72FOUPtekqzFLym3Qs5gREwbubaT:B/n03MdR8DB0OU0Fp2CYuba

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks

static1

Score
3/10

behavioral1

Score
N/A

behavioral2

Score
N/A

behavioral3

xmrigminerupx
Score
10/10

behavioral4

Score
N/A

behavioral5

Score
N/A

behavioral6

Score
N/A

behavioral7

Score
N/A

behavioral8

Score
N/A

behavioral9

Score
N/A

behavioral10

Score
N/A

behavioral11

xmrigminerupx
Score
10/10

behavioral12

Score
N/A

behavioral13

Score
N/A

behavioral14

xmrigminerupx
Score
10/10

behavioral15

Score
N/A

behavioral16

Score
N/A

behavioral17

Score
N/A

behavioral18

Score
N/A

behavioral19

Score
N/A

behavioral20

Score
N/A

behavioral21

Score
N/A

behavioral22

Score
N/A

behavioral23

xmrigminerupx
Score
10/10

behavioral24

xmrigminerupx
Score
10/10

behavioral25

xmrigminerupx
Score
10/10

behavioral26

xmrigminerupx
Score
10/10

behavioral27

xmrigminerupx
Score
10/10

behavioral28

xmrigminerupx
Score
10/10

behavioral29

xmrigminerupx
Score
10/10

behavioral30

xmrigminerupx
Score
10/10

behavioral31

xmrigminerupx
Score
10/10

behavioral32

xmrigminerupx
Score
10/10