Overview

overview

10

Static

static

10

e260c62ad0...55.exe

windows7-x64

10

e260c62ad0...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e260c62ad0902d8963bd83e3450b1a28c5b964252bf937e49a7991a39a51db55

  • Size

    1.8MB

  • Sample

    241218-hdzncaxnaz

  • MD5

    1d924c3f3ada67f80be9b8eb8460ee2f

  • SHA1

    b40de9ba0b53fe6200ea5aae2a3a4b1b6f9f9e7a

  • SHA256

    e260c62ad0902d8963bd83e3450b1a28c5b964252bf937e49a7991a39a51db55

  • SHA512

    3c02c65774548f31c73ba7079acb98b45a33d1e884d6e72e16e5e566c11d9a40c9272c367c0d4d2b7293bdf90daab96d35c820229b2b6796895103574b995a64

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnmxZ8zouZxE9:GemTLkNdfE0pZyQ

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      e260c62ad0902d8963bd83e3450b1a28c5b964252bf937e49a7991a39a51db55

    • Size

      1.8MB

    • MD5

      1d924c3f3ada67f80be9b8eb8460ee2f

    • SHA1

      b40de9ba0b53fe6200ea5aae2a3a4b1b6f9f9e7a

    • SHA256

      e260c62ad0902d8963bd83e3450b1a28c5b964252bf937e49a7991a39a51db55

    • SHA512

      3c02c65774548f31c73ba7079acb98b45a33d1e884d6e72e16e5e566c11d9a40c9272c367c0d4d2b7293bdf90daab96d35c820229b2b6796895103574b995a64

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnmxZ8zouZxE9:GemTLkNdfE0pZyQ

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks