Overview

overview

10

Static

static

10

9f44d20bf3...fN.exe

windows7-x64

10

9f44d20bf3...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f44d20bf32119323fa7395b6e951c3de2f1f6eba915fc9bdc538d24d8bbe3dfN.exe

  • Size

    2.3MB

  • Sample

    241225-xfw3kaspas

  • MD5

    dba2264dff520984c30b3fd2c041d890

  • SHA1

    d4dfa72de7b24802d54cbce4b1eeaa6830d59921

  • SHA256

    9f44d20bf32119323fa7395b6e951c3de2f1f6eba915fc9bdc538d24d8bbe3df

  • SHA512

    7252f2ff2edd26ecb08994a97ed4ce7a6aeea361ec4012192bb1505cea18973ab74cf1e65dd3a6ce90d14787ae09856081fc69ea16cb398410ca223b388126fc

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleL9oVt:NABZ

Score
10/10
xmrigexecutionminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      9f44d20bf32119323fa7395b6e951c3de2f1f6eba915fc9bdc538d24d8bbe3dfN.exe

    • Size

      2.3MB

    • MD5

      dba2264dff520984c30b3fd2c041d890

    • SHA1

      d4dfa72de7b24802d54cbce4b1eeaa6830d59921

    • SHA256

      9f44d20bf32119323fa7395b6e951c3de2f1f6eba915fc9bdc538d24d8bbe3df

    • SHA512

      7252f2ff2edd26ecb08994a97ed4ce7a6aeea361ec4012192bb1505cea18973ab74cf1e65dd3a6ce90d14787ae09856081fc69ea16cb398410ca223b388126fc

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleL9oVt:NABZ

    Score
    10/10
    xmrigexecutionminerupxpersistenceprivilege_escalation

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks