Overview

overview

10

Static

static

10

b4ed2168fe...5N.exe

windows7-x64

10

b4ed2168fe...5N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4ed2168fe19f8c4d1cfb643830abc382a07e27fefd14a22455728ada11c1585N.exe

  • Size

    1.8MB

  • Sample

    241226-fh6aksxkez

  • MD5

    a8d0e8581a75d64959925ef179dd7150

  • SHA1

    732df9e913f25d58ddfced22024a007d9cf64c2c

  • SHA256

    b4ed2168fe19f8c4d1cfb643830abc382a07e27fefd14a22455728ada11c1585

  • SHA512

    59bf3e7003cbc0f81416a89f7104f6313fcab4951c2e14aec81106f4c65569b4b13cee12db26e8013d4030419908ceb424e07c6435d1edc533c90bd4695cad6f

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VFi:NAB3

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      b4ed2168fe19f8c4d1cfb643830abc382a07e27fefd14a22455728ada11c1585N.exe

    • Size

      1.8MB

    • MD5

      a8d0e8581a75d64959925ef179dd7150

    • SHA1

      732df9e913f25d58ddfced22024a007d9cf64c2c

    • SHA256

      b4ed2168fe19f8c4d1cfb643830abc382a07e27fefd14a22455728ada11c1585

    • SHA512

      59bf3e7003cbc0f81416a89f7104f6313fcab4951c2e14aec81106f4c65569b4b13cee12db26e8013d4030419908ceb424e07c6435d1edc533c90bd4695cad6f

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VFi:NAB3

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks