Overview

overview

10

Static

static

10

58f57b0f56...78.exe

windows7-x64

10

58f57b0f56...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58f57b0f5682411456bcafa3a25205415763a32b99a5848c1e9d4e6133c08978.exe

  • Size

    1.9MB

  • Sample

    241126-amnnfa1jhr

  • MD5

    1f3c69ac74b8d2daba986f48baf331c4

  • SHA1

    b955862116b35b1898434837f2c1bdd7c6b4e2e8

  • SHA256

    58f57b0f5682411456bcafa3a25205415763a32b99a5848c1e9d4e6133c08978

  • SHA512

    10300db05c683456842a847211eac037abeaa97c98051aed48af8b39c430ea360bbca1b5832748443e8b3b476c5f78d1dc8a6e288d901579c1e7a439ffe02b6c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCB2lUU:NABR

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      58f57b0f5682411456bcafa3a25205415763a32b99a5848c1e9d4e6133c08978.exe

    • Size

      1.9MB

    • MD5

      1f3c69ac74b8d2daba986f48baf331c4

    • SHA1

      b955862116b35b1898434837f2c1bdd7c6b4e2e8

    • SHA256

      58f57b0f5682411456bcafa3a25205415763a32b99a5848c1e9d4e6133c08978

    • SHA512

      10300db05c683456842a847211eac037abeaa97c98051aed48af8b39c430ea360bbca1b5832748443e8b3b476c5f78d1dc8a6e288d901579c1e7a439ffe02b6c

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCB2lUU:NABR

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks