Overview

overview

10

Static

static

10

rig.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rig.exe

  • Size

    2.4MB

  • Sample

    250109-229yrswlgj

  • MD5

    570a9cc9fd20159e92707abe69676299

  • SHA1

    864cb610c0c80cf8ff00fd4aaae9b05fa63fd990

  • SHA256

    ba52bd426e17cf8902ae05eb8caea7e0510d668db97dedd2cabcd1dc5a06063f

  • SHA512

    ba11d2e1888f736d1934e78db6397ae04ea49422beb7392575422ea51cd459ac9b0c8a274397ab828792728364d145c16fc2390242a17a56a8ad02fa4c580f92

  • SSDEEP

    49152:BfOqHErn3OFIJDOmxFVIdtKfBDhqGDZdB4hYk/0AK0uOkJA79OB8OITieIr:fcne+9Omb+dtKfBD3rZOkJA79OBkbI

Score
10/10
privateloaderxmrigdiscoveryloaderminervmprotect

Malware Config

Targets

    • Target

      rig.exe

    • Size

      2.4MB

    • MD5

      570a9cc9fd20159e92707abe69676299

    • SHA1

      864cb610c0c80cf8ff00fd4aaae9b05fa63fd990

    • SHA256

      ba52bd426e17cf8902ae05eb8caea7e0510d668db97dedd2cabcd1dc5a06063f

    • SHA512

      ba11d2e1888f736d1934e78db6397ae04ea49422beb7392575422ea51cd459ac9b0c8a274397ab828792728364d145c16fc2390242a17a56a8ad02fa4c580f92

    • SSDEEP

      49152:BfOqHErn3OFIJDOmxFVIdtKfBDhqGDZdB4hYk/0AK0uOkJA79OB8OITieIr:fcne+9Omb+dtKfBD3rZOkJA79OBkbI

    Score
    10/10
    privateloaderxmrigdiscoveryloaderminervmprotect

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Privateloader family

      privateloader

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks