Overview

overview

10

Static

static

10

ad3b5a4ce9...1b.exe

windows7-x64

10

ad3b5a4ce9...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad3b5a4ce91f8d93fbf85f968d6fa51f96737a52e29f11d50de109938da7731b

  • Size

    1.6MB

  • Sample

    241221-eaxg2aslgm

  • MD5

    634d621875304ac5cdcefd4e8ce16e98

  • SHA1

    a8355dc20e8b971ebf14f1efaf71eb62316bbab5

  • SHA256

    ad3b5a4ce91f8d93fbf85f968d6fa51f96737a52e29f11d50de109938da7731b

  • SHA512

    2e34582cdd48e11c3fe31a054ce2b2960cf7ac82808f736e97622cf387175ca199705ba1bb6f022b21b06cd6fafa12c7dba342cd70802d22e5d0625c35fc763a

  • SSDEEP

    49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5ybqOH:GemTLkNdfE0pZys

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      ad3b5a4ce91f8d93fbf85f968d6fa51f96737a52e29f11d50de109938da7731b

    • Size

      1.6MB

    • MD5

      634d621875304ac5cdcefd4e8ce16e98

    • SHA1

      a8355dc20e8b971ebf14f1efaf71eb62316bbab5

    • SHA256

      ad3b5a4ce91f8d93fbf85f968d6fa51f96737a52e29f11d50de109938da7731b

    • SHA512

      2e34582cdd48e11c3fe31a054ce2b2960cf7ac82808f736e97622cf387175ca199705ba1bb6f022b21b06cd6fafa12c7dba342cd70802d22e5d0625c35fc763a

    • SSDEEP

      49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5ybqOH:GemTLkNdfE0pZys

    Score
    10/10
    xmrigminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks