xmrig | 025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821 | Triage

Submit
Reports

Overview

overview

Static

static

025081af0c...21.exe

windows7-x64

025081af0c...21.exe

windows10-2004-x64

Sharing

General

Target

025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821
Size

1.2MB
Sample

241223-xre87axrbv
MD5

bab3e69c153337a1cb61e2d61a119ae7
SHA1

d3778583c5e3f7ce972072847dfafadefe880775
SHA256

025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821
SHA512

c6e4dd13b29513ab8b87796ffb5d4a7b857ecdf9de19aa2a7aa5dca95f5bf90bf73c1ef6a930f504c913481ab73f526ca8f764b89606bc520220b9b8cd5bd352
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszQEMru475NX6I9L:GezaTF8FcNkNdfE0pZ9ozttwIRQNdjL

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821.exe

Resource

win7-20241023-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821
- Size
  
  1.2MB
- MD5
  
  bab3e69c153337a1cb61e2d61a119ae7
- SHA1
  
  d3778583c5e3f7ce972072847dfafadefe880775
- SHA256
  
  025081af0c911bfabfb37db09604228e753c5cb187150109650f314bec23e821
- SHA512
  
  c6e4dd13b29513ab8b87796ffb5d4a7b857ecdf9de19aa2a7aa5dca95f5bf90bf73c1ef6a930f504c913481ab73f526ca8f764b89606bc520220b9b8cd5bd352
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszQEMru475NX6I9L:GezaTF8FcNkNdfE0pZ9ozttwIRQNdjL
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2024

Terms | Privacy