General

  • Target
    Triage-32.7z
  • Size 11.9MB
  • Sample241121-p1s8easles
  • SHA256 834dc77bde2ef5838592e137c097553696b7358fe1956465a7417f5681308065
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      Triage-32/Test - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test2 - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test2 - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test2 - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test2 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test2.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test3 - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test3 - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test3 - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test3 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test3.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test4 - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test4 - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test4 - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test4 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test4.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test5 - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test5 - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test5 - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test5 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test5.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test6 - Copy (2).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test6 - Copy (3).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test6 - Copy (4).exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test6 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test6.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test7 - Copy.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      Triage-32/Test7.exe
    • Size 4.9MB
    • SHA256 bfca67785b156c56f5e04edd97f5dfd4b72664facf1a663dbfb6e2662abf032b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks

static1

Score
3/10

behavioral1

xmrigminerupx
Score
10/10

behavioral2

xmrigminerupx
Score
10/10

behavioral3

xmrigminerupx
Score
10/10

behavioral4

xmrigminerupx
Score
10/10

behavioral5

xmrigminerupx
Score
10/10

behavioral6

xmrigminerupx
Score
10/10

behavioral7

xmrigminerupx
Score
10/10

behavioral8

xmrigminerupx
Score
10/10

behavioral9

xmrigminerupx
Score
10/10

behavioral10

xmrigminerupx
Score
10/10

behavioral11

xmrigminerupx
Score
10/10

behavioral12

xmrigminerupx
Score
10/10

behavioral13

xmrigminerupx
Score
10/10

behavioral14

xmrigminerupx
Score
10/10

behavioral15

xmrigminerupx
Score
10/10

behavioral16

xmrigminerupx
Score
10/10

behavioral17

xmrigminerupx
Score
10/10

behavioral18

xmrigminerupx
Score
10/10

behavioral19

xmrigminerupx
Score
10/10

behavioral20

xmrigminerupx
Score
10/10

behavioral21

xmrigminerupx
Score
10/10

behavioral22

xmrigminerupx
Score
10/10

behavioral23

xmrigminerupx
Score
10/10

behavioral24

xmrigminerupx
Score
10/10

behavioral25

xmrigminerupx
Score
10/10

behavioral26

xmrigminerupx
Score
10/10

behavioral27

xmrigminerupx
Score
10/10

behavioral28

xmrigminerupx
Score
10/10

behavioral29

xmrigminerupx
Score
10/10

behavioral30

xmrigminerupx
Score
10/10

behavioral31

xmrigminerupx
Score
10/10

behavioral32

xmrigminerupx
Score
10/10