Overview

overview

10

Static

static

3

aaadri.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aaadri.exe

  • Size

    2.5MB

  • Sample

    241228-rjqgasylat

  • MD5

    9f36b71007f45e5798edb2a7c69a9173

  • SHA1

    57ee352beacae902816516ab7d3a881e56fb456c

  • SHA256

    1d2ee5ac64af7f3c1201f6819e460c03c65da6c81a7b69e3ae84bad9a1226cb5

  • SHA512

    62dbec2107ff46536311d5937381f8181aba350b7f39cde586cecfa115243d40f1f7b71b8337403b179678e1bb4b6c2c27c1f749aa88f9c3c23efd063449813e

  • SSDEEP

    49152:Uu2niGtF/++JGq24/Tz40hDqFSw1AXRuA08BgWrio3c13H6Lzw40zhY2L:vyiGtF/FAMTsIDhuy0KoXO2

Score
10/10
xmrigevasionexecutionminerpersistenceupx

Malware Config

Targets

    • Target

      aaadri.exe

    • Size

      2.5MB

    • MD5

      9f36b71007f45e5798edb2a7c69a9173

    • SHA1

      57ee352beacae902816516ab7d3a881e56fb456c

    • SHA256

      1d2ee5ac64af7f3c1201f6819e460c03c65da6c81a7b69e3ae84bad9a1226cb5

    • SHA512

      62dbec2107ff46536311d5937381f8181aba350b7f39cde586cecfa115243d40f1f7b71b8337403b179678e1bb4b6c2c27c1f749aa88f9c3c23efd063449813e

    • SSDEEP

      49152:Uu2niGtF/++JGq24/Tz40hDqFSw1AXRuA08BgWrio3c13H6Lzw40zhY2L:vyiGtF/FAMTsIDhuy0KoXO2

    Score
    10/10
    xmrigevasionexecutionminerpersistenceupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks