Overview

overview

10

Static

static

10

0f4b98f450...df.exe

windows7-x64

10

0f4b98f450...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f4b98f45023a37630ca9295e0f220d1fde4bff78085e0b34508f06f771d00df

  • Size

    1.7MB

  • Sample

    241220-zcpv7atkgz

  • MD5

    195cda30ce291ca35d54e588696dc0f7

  • SHA1

    35575fb2f0285799f961f1b574887cb09cae272d

  • SHA256

    0f4b98f45023a37630ca9295e0f220d1fde4bff78085e0b34508f06f771d00df

  • SHA512

    6e620927e46ed479fa5bfa3c5b2aa6717dee81f39d02153e4af9006c12625bede38d79d2325053b8d3b574d3c701bf7f4b42c6dcd15358793ab8f3770f043a36

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRRvzc26JxS+:GemTLkNdfE0pZy4

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      0f4b98f45023a37630ca9295e0f220d1fde4bff78085e0b34508f06f771d00df

    • Size

      1.7MB

    • MD5

      195cda30ce291ca35d54e588696dc0f7

    • SHA1

      35575fb2f0285799f961f1b574887cb09cae272d

    • SHA256

      0f4b98f45023a37630ca9295e0f220d1fde4bff78085e0b34508f06f771d00df

    • SHA512

      6e620927e46ed479fa5bfa3c5b2aa6717dee81f39d02153e4af9006c12625bede38d79d2325053b8d3b574d3c701bf7f4b42c6dcd15358793ab8f3770f043a36

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9ozttwIRRvzc26JxS+:GemTLkNdfE0pZy4

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks