Overview

overview

10

Static

static

10

008c619d75...a4.exe

windows7-x64

10

008c619d75...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    008c619d7586369c107df8800349ee07ca5dc3aaa4df7ba19f5cd009743ae5a4.exe

  • Size

    2.0MB

  • Sample

    241218-de4lga1nhk

  • MD5

    407a2f274e0d2ed59f5e93006b9eee86

  • SHA1

    89c62e02d795b3122054f8355895370ec4a7357b

  • SHA256

    008c619d7586369c107df8800349ee07ca5dc3aaa4df7ba19f5cd009743ae5a4

  • SHA512

    3ea4439874eb28dc0cba79dc39a18ac75e821a0789f87c157d2bb1e43ac5f4149d7c90ec29bea440a474c178465e5e41eb92c1618230475a99d757f890f53d10

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PVA:NABQ

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      008c619d7586369c107df8800349ee07ca5dc3aaa4df7ba19f5cd009743ae5a4.exe

    • Size

      2.0MB

    • MD5

      407a2f274e0d2ed59f5e93006b9eee86

    • SHA1

      89c62e02d795b3122054f8355895370ec4a7357b

    • SHA256

      008c619d7586369c107df8800349ee07ca5dc3aaa4df7ba19f5cd009743ae5a4

    • SHA512

      3ea4439874eb28dc0cba79dc39a18ac75e821a0789f87c157d2bb1e43ac5f4149d7c90ec29bea440a474c178465e5e41eb92c1618230475a99d757f890f53d10

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PVA:NABQ

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks