Overview

overview

10

Static

static

5

6d0166e9bd...0N.exe

windows7-x64

10

6d0166e9bd...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d0166e9bd3d64a399c35209291c29f86dd43cebf3663ba079d305e612146890N.exe

  • Size

    2.0MB

  • Sample

    241126-bnd13awndz

  • MD5

    abe35e3401cc3ecb80221a80f3533390

  • SHA1

    997130cb6ce69481f7d8fa512131797e31f10eb0

  • SHA256

    6d0166e9bd3d64a399c35209291c29f86dd43cebf3663ba079d305e612146890

  • SHA512

    4d0992293e6040ad4a29d7bf97caa31c79ce7f180d30f289d61c4d8daa2fbc51a8ad8df9b02cc771be6b708626753430203f30b2ee7b2a94a236eaa5f6a39312

  • SSDEEP

    49152:xlsE2cqxe9noZYt3m3dlTg3Mu7TQ508g9udhh/KKlUm3ee:MvlxgQD3dlTyMqQ57g9udhhC0

Score
10/10
xmrigdiscoveryminerupx

Malware Config

Targets

    • Target

      6d0166e9bd3d64a399c35209291c29f86dd43cebf3663ba079d305e612146890N.exe

    • Size

      2.0MB

    • MD5

      abe35e3401cc3ecb80221a80f3533390

    • SHA1

      997130cb6ce69481f7d8fa512131797e31f10eb0

    • SHA256

      6d0166e9bd3d64a399c35209291c29f86dd43cebf3663ba079d305e612146890

    • SHA512

      4d0992293e6040ad4a29d7bf97caa31c79ce7f180d30f289d61c4d8daa2fbc51a8ad8df9b02cc771be6b708626753430203f30b2ee7b2a94a236eaa5f6a39312

    • SSDEEP

      49152:xlsE2cqxe9noZYt3m3dlTg3Mu7TQ508g9udhh/KKlUm3ee:MvlxgQD3dlTyMqQ57g9udhhC0

    Score
    10/10
    xmrigdiscoveryminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks