Overview

overview

10

Static

static

3

95c1d9dd76...48.exe

windows7-x64

10

95c1d9dd76...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95c1d9dd76abc999cf76d0acc7f2c59205e95cf6a96d3867328628dc7289db48.exe

  • Size

    5.0MB

  • Sample

    241219-dy42cawpbl

  • MD5

    7d8f7b0c924a228c2ca81d3959d0b604

  • SHA1

    972eae6c3f80dd0be06fb73bb64553cd10360873

  • SHA256

    95c1d9dd76abc999cf76d0acc7f2c59205e95cf6a96d3867328628dc7289db48

  • SHA512

    6c5b93313fabc4bc0aab93da27bcbabb422fceef2bca9185d0cdc4e634240df9699b05389308e06ddedc604430a6c0164de8763b35d1268dce37e052c2c4bb81

  • SSDEEP

    98304:VNvN3Y8Dz2X5ny7kOywy+VHoJzeDBuqgeYY8S91anzz9oq+T:FnaX5nfitVuzUBuDH88zpUT

Score
10/10
xmrigevasionexecutionminerpersistenceupx

Malware Config

Targets

    • Target

      95c1d9dd76abc999cf76d0acc7f2c59205e95cf6a96d3867328628dc7289db48.exe

    • Size

      5.0MB

    • MD5

      7d8f7b0c924a228c2ca81d3959d0b604

    • SHA1

      972eae6c3f80dd0be06fb73bb64553cd10360873

    • SHA256

      95c1d9dd76abc999cf76d0acc7f2c59205e95cf6a96d3867328628dc7289db48

    • SHA512

      6c5b93313fabc4bc0aab93da27bcbabb422fceef2bca9185d0cdc4e634240df9699b05389308e06ddedc604430a6c0164de8763b35d1268dce37e052c2c4bb81

    • SSDEEP

      98304:VNvN3Y8Dz2X5ny7kOywy+VHoJzeDBuqgeYY8S91anzz9oq+T:FnaX5nfitVuzUBuDH88zpUT

    Score
    10/10
    xmrigevasionexecutionminerpersistenceupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks