xmrig | f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c | Triage

Submit
Reports

Overview

overview

Static

static

f6ca0d345a...6c.exe

windows7-x64

f6ca0d345a...6c.exe

windows10-2004-x64

Sharing

General

Target

f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c
Size

1.1MB
Sample

250125-ktg5cavqfz
MD5

07667c91dd8bc6864ecc21be59f8b7bf
SHA1

32ab371e5c5e582ee129764940bfe72400874471
SHA256

f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c
SHA512

a2698038e714946dbad49d06a0807b7b315e9c732d540abbce038b9f16ae4f6458dc9e482b5d73b70896708800e98ceaeb26b2bb8fe13a08db18308bd6af3d93
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5QbMmJkr6V:GezaTF8FcNkNdfE0pZ9ozttwIRx2FJP

Score

10^/10

xmrig defense_evasion miner privilege_escalation

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c.exe

Resource

win7-20240903-en

xmrig defense_evasion miner privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c.exe

Resource

win10v2004-20241007-en

xmrig defense_evasion miner privilege_escalation

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c
- Size
  
  1.1MB
- MD5
  
  07667c91dd8bc6864ecc21be59f8b7bf
- SHA1
  
  32ab371e5c5e582ee129764940bfe72400874471
- SHA256
  
  f6ca0d345ad96b7eb9ae01d9dc93c9f3ed88abec42046c7b55a51086cad2126c
- SHA512
  
  a2698038e714946dbad49d06a0807b7b315e9c732d540abbce038b9f16ae4f6458dc9e482b5d73b70896708800e98ceaeb26b2bb8fe13a08db18308bd6af3d93
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5QbMmJkr6V:GezaTF8FcNkNdfE0pZ9ozttwIRx2FJP
Score

10^/10

xmrig defense_evasion miner privilege_escalation
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigdefense_evasionminerprivilege_escalation

behavioral2

xmrigdefense_evasionminerprivilege_escalation

© 2018-2025

Terms | Privacy