Overview

overview

10

Static

static

10

d513f37bc0...00.exe

windows7-x64

10

d513f37bc0...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d513f37bc057b1f7c1842fb1aeb7d0fb9b1ee3d9e25dbeb5b4ce6326d0794800

  • Size

    1.8MB

  • Sample

    241218-gnk29swle1

  • MD5

    a45a844704b8d0ccfc486e82d119af9f

  • SHA1

    13223368159690969167c8fc78ce82949baefdcb

  • SHA256

    d513f37bc057b1f7c1842fb1aeb7d0fb9b1ee3d9e25dbeb5b4ce6326d0794800

  • SHA512

    760e70cd1531374262fcbc30c66d64f22ab5beb64567193154b3aa7aeabde176760cd50831d384b22ceed0e467f4d94ccdbdf90d5185ada10d84ae45bdb55403

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnmxZ8zouZxV:GemTLkNdfE0pZyX

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      d513f37bc057b1f7c1842fb1aeb7d0fb9b1ee3d9e25dbeb5b4ce6326d0794800

    • Size

      1.8MB

    • MD5

      a45a844704b8d0ccfc486e82d119af9f

    • SHA1

      13223368159690969167c8fc78ce82949baefdcb

    • SHA256

      d513f37bc057b1f7c1842fb1aeb7d0fb9b1ee3d9e25dbeb5b4ce6326d0794800

    • SHA512

      760e70cd1531374262fcbc30c66d64f22ab5beb64567193154b3aa7aeabde176760cd50831d384b22ceed0e467f4d94ccdbdf90d5185ada10d84ae45bdb55403

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnmxZ8zouZxV:GemTLkNdfE0pZyX

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks