Resubmissions

25/11/2024, 17:13

241125-vrxr5atnbp10

25/11/2024, 17:13

241125-vrt18stnbl10

25/11/2024, 17:13

241125-vrr7mstnbj10

25/11/2024, 09:52

241125-lwjavsxjfn10

General

  • Target
    UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976.7z
  • Size 11.9MB
  • Sample241125-vrt18stnbl
  • SHA256 346cc7566192198b4cccfbcf75a083fbc8702ed576ca9e38c734dd4ca5a0a670
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/56hV33j0Zk26xBRQUKQoibTWMzQ1DO_088267.exe
    • Size 4.9MB
    • SHA256 34a1af6f382d625751970df7b954184de8d15cc96218a99cd2fbbd31534c39b0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/AC5zel3AV7vA8b64BXxHmBpuqvCVrl_793412.exe
    • Size 4.9MB
    • SHA256 f5241821094ae8760aa38f92df037d7b6a53466176fa11fa48bd30d3000062f3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/FZC18z1mmOSrfGmgRohsEa8b87QKyK_004944.exe
    • Size 4.9MB
    • SHA256 74af629cb9f850b1ca7e9734944837222ed9a336f83e6f900fef4670ec14b211
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/H9zMDiucu4hoAtgomWFd5CAHBZ89AR_233385.exe
    • Size 4.9MB
    • SHA256 fe813fb011879fd6c2a9d991f1b6152bd7e64e98cd79f59bfef308ffdd47a4c1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/IbxyHSgPkKXhHO3XECSuXtrGrP78dY_051705.exe
    • Size 4.9MB
    • SHA256 710405ba0786898a25dd4a13ac85781fddb994bc1db8899282147a62a0c505cf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/JWPdwAR7tf5F2I2M0XlaUFZpXkDHYS_248818.exe
    • Size 4.9MB
    • SHA256 9aee367c5f4502676c1a93e79519b6cd7df844749c640683e30e5141165d5f64
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/LufhxvbVaYw1RXsbz89wC140KwFWBG_439155.exe
    • Size 4.9MB
    • SHA256 7d821b4d7f35ceb933fcda3347e4dbeff62de35381f29e2781e74034d0a7a6e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/SKR8Xe9D0cXCZDZPbZkg8tz0KL8VIp_015702.exe
    • Size 4.9MB
    • SHA256 7dbca6206d8f8d54fef05bf4f7888233c700511dde7ed9fdbb5e0200d7dca166
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/SMFjVyESw8I9PTvLFZFVsEVapqgviY_867235.exe
    • Size 4.9MB
    • SHA256 3f2e6631c2a6f54ce4fa6ee1b5803f1c0f01b8ef546d4f7d59ff80b705ae5273
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/T78QQDbK2Slo8gJ2UXctsrxPxHgjGt_467036.exe
    • Size 4.9MB
    • SHA256 50e5dbec65d6d91e14b07d608f161a736c3a87398ea424feea5b1bcc09ace611
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/VD0HrhXsggfxjVhZKwKvFcUgZngYpL_725314.exe
    • Size 4.9MB
    • SHA256 1ee2248f6d0d167a1d727c4c9fc35fcc0e9a22fd94039a9ce4a90ecced4cb2ce
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/VMaiSLAgN8PSkdeOBll7ujSMJqtL0B_784725.exe
    • Size 4.9MB
    • SHA256 62a720c705c2d101eb16f015f9abccebc8f88d8c4c8ef2e3eac4a313565df90c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/YHgiq8V6Fe1kWFfxgebX0tkrZhzCzu_920778.exe
    • Size 4.9MB
    • SHA256 068f6943a9146fdfd82f460694c842bbf61a42d04be7942e74ac595aaedef67c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/bcnYlT4H88bX2xmChdmk3MT3A9959W_902017.exe
    • Size 4.9MB
    • SHA256 647675cfe31d35d77be0d34542c489db46f7d9f75fb1e30908e93975ed3ec43c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/cz7gZTgrlXdeXdX0GeVttHKwMvPoBu_100224.exe
    • Size 4.9MB
    • SHA256 4da1e2e9bace60c9f1aa6bee0a83609d52e3237e5a8ce8cc7c2bd4db27a51889
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/d4DRbF4lHfHnECxCaAJjnsHMjvRUuT_697575.exe
    • Size 4.9MB
    • SHA256 11fc12e95e6919c2d838ba825b5bcf36627e4a4c5bd3acf970045fa0021f37e9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/dH0vwJrfFCMTza8GNwvojfVVLEOsFO_754126.exe
    • Size 4.9MB
    • SHA256 482cc68ed3098ee40d94599111694910579d70aa23ca2161b272ec00d0d08108
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/g9sj08YZGrYURlSuoHSBfD2nMsxYwq_451878.exe
    • Size 4.9MB
    • SHA256 87d2d9cca230b17f13d39052c55cd28869d6614e1258939299a10ab2c05af95e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/gEGj0hrvo86NOP4C6uFjuQZGc7L9SD_033621.exe
    • Size 4.9MB
    • SHA256 72ab4f675af59783b240a59afa236946a386608e69022bcfadb162157aa98120
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/i1PZKF5Ty5Z4JG8hL2JcygPplPihXS_988211.exe
    • Size 4.9MB
    • SHA256 b8a7502163c72009827087cf03a051d1a8812c52a272b589808c9c13bd555317
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/kFlc4oNw6aamroILD0qpdj04MfSRdC_472441.exe
    • Size 4.9MB
    • SHA256 45d6a7d08655744cb2145d5300226c2c7a97d4654a26f77d87b132bf781fc399
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/ksggHuRICgGdy4hFQ7TQRtRAFrmo9g_005883.exe
    • Size 4.9MB
    • SHA256 220eb334c3daaf66c5cdf9d4df65120e65b6c8e09955e4a29dffb7c43b26f029
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/lpxGanhj9mp46k1kUv9pBlExkpxjRo_341428.exe
    • Size 4.9MB
    • SHA256 14eaf45272c0f8d22032113dfd7fc5e8bab2a071d0916a8025a51201e4e0b23e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/mF2M6MDHwuDSA5ImXG8llsrjkmC05f_743618.exe
    • Size 4.9MB
    • SHA256 5b5d337e024fd9d0df05a3f4a5884dfe08a181d5a6925a8eb462dc25ce2a173c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/nAUgDpjI6p9TJ1s2ecjTDpXBQyXXtZ_398840.exe
    • Size 4.9MB
    • SHA256 d5f36fe41efb119c6d531baee593557c8ada37ac408f7c33bd343eba886d97f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/pXNS8K9fh2GbsFzm05FSEV0i7gZH1i_700021.exe
    • Size 4.9MB
    • SHA256 94090dd85ec5e90bb4ba0dc8d9801491878a9a0ae349e70d3e2bc4cfb1f2b0c7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/sjcH0YxZZOOsABx58ITvg1uPWbRbE8_934035.exe
    • Size 4.9MB
    • SHA256 1620575fe975a30ed1c7eba4ceeffd85d6a0cf9ecb985bbd47994fff16da826a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/t5bQ9k2jwSWS8mOCFHDsDjImPq05eW_436400.exe
    • Size 4.9MB
    • SHA256 ac290fc2a7dedcf669b60785e020c6cea3369e77123d3114aa7b946e2b07fff8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/tNL1iZslogiTHVT4WoLJnOIUxfb1y9_736622.exe
    • Size 4.9MB
    • SHA256 838bc6b16320574c6bd746146ac20d155321a0ce68e21a5240acfd239df3b68d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/wNGm7TKEGTauV0JK3s4EJDeiQqLRyr_259035.exe
    • Size 4.9MB
    • SHA256 2ca933b559cd31b813a3ea434732613f62b768dd2c81eb4707466a123d8ff9e9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/xriqKcYplsVMajrABwapyatwUlnHT5_216294.exe
    • Size 4.9MB
    • SHA256 312e253b303b9a0ae907191f14198991fad769f0e7cfa9c13a59d9fadc21d181
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      UIgt876tUHB876tIUG87tiuG87TijT89h89T879hgiuGH86ijH8976/z2AhOpQccu8nkITnwvx40BDfqKLX1O_456383.exe
    • Size 4.9MB
    • SHA256 8208b805311ca3be243b8975ecd255d353b82c1fa80c58290ad87dd7fa2bb874
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks

static1

Score
3/10

behavioral1

xmrigminerupx
Score
10/10

behavioral2

xmrigminerupx
Score
10/10

behavioral3

xmrigminerupx
Score
10/10

behavioral4

xmrigminerupx
Score
10/10

behavioral5

xmrigminerupx
Score
10/10

behavioral6

xmrigminerupx
Score
10/10

behavioral7

xmrigminerupx
Score
10/10

behavioral8

xmrigminerupx
Score
10/10

behavioral9

xmrigminerupx
Score
10/10

behavioral10

xmrigminerupx
Score
10/10

behavioral11

xmrigminerupx
Score
10/10

behavioral12

xmrigminerupx
Score
10/10

behavioral13

xmrigminerupx
Score
10/10

behavioral14

xmrigminerupx
Score
10/10

behavioral15

xmrigminerupx
Score
10/10

behavioral16

xmrigminerupx
Score
10/10

behavioral17

xmrigminerupx
Score
10/10

behavioral18

xmrigminerupx
Score
10/10

behavioral19

xmrigminerupx
Score
10/10

behavioral20

xmrigminerupx
Score
10/10

behavioral21

xmrigminerupx
Score
10/10

behavioral22

xmrigminerupx
Score
10/10

behavioral23

xmrigminerupx
Score
10/10

behavioral24

xmrigminerupx
Score
10/10

behavioral25

xmrigminerupx
Score
10/10

behavioral26

xmrigminerupx
Score
10/10

behavioral27

xmrigminerupx
Score
10/10

behavioral28

xmrigminerupx
Score
10/10

behavioral29

xmrigminerupx
Score
10/10

behavioral30

xmrigminerupx
Score
10/10

behavioral31

xmrigminerupx
Score
10/10

behavioral32

xmrigminerupx
Score
10/10