xmrig | d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9 | Triage

Submit
Reports

Overview

overview

Static

static

d04228c107...b9.exe

windows7-x64

d04228c107...b9.exe

windows10-2004-x64

Sharing

General

Target

d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9
Size

1.5MB
Sample

241225-dhcbdswjbs
MD5

ce2b49633b416f7b2bbb83226c09f4ff
SHA1

36b3f85d4016d23c716645219614519dff7e2de0
SHA256

d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9
SHA512

ddcbd2bb3d08a3c4e5b9ac552a5073fb53a02f4b4b0a7bdfcd5c85728a3c52b03ce0f11576aa06868df8554aad2ed746277010a1ac042edbc7423b25953c3b98
SSDEEP

49152:GezaTF8FcNkNdfE0pZ9ozttwIRx3QjVwiPk:GemTLkNdfE0pZyf

Score

10^/10

xmrig miner persistence privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9.exe

Resource

win7-20241010-en

xmrig miner persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9
- Size
  
  1.5MB
- MD5
  
  ce2b49633b416f7b2bbb83226c09f4ff
- SHA1
  
  36b3f85d4016d23c716645219614519dff7e2de0
- SHA256
  
  d04228c107e9f1adbb1ce17b25a30c8e3a4fc66dc7977ab1b0660e71da1b41b9
- SHA512
  
  ddcbd2bb3d08a3c4e5b9ac552a5073fb53a02f4b4b0a7bdfcd5c85728a3c52b03ce0f11576aa06868df8554aad2ed746277010a1ac042edbc7423b25953c3b98
- SSDEEP
  
  49152:GezaTF8FcNkNdfE0pZ9ozttwIRx3QjVwiPk:GemTLkNdfE0pZyf
Score

10^/10

xmrig miner persistence privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigminerpersistenceprivilege_escalation

behavioral2

© 2018-2025

Terms | Privacy