Overview

overview

10

Static

static

10

1ca8ebf0a3...3N.exe

windows7-x64

10

1ca8ebf0a3...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ca8ebf0a3340b2e8cd2856fc4d3644ce9d6cad07205b4343bff8cc6325f3073N.exe

  • Size

    1.9MB

  • Sample

    250125-n9crca1rgt

  • MD5

    f4793b0831e941c4c934a9571a77a650

  • SHA1

    9c18d3ae1be0e0643c9967fa2580f0cbc866aa6a

  • SHA256

    1ca8ebf0a3340b2e8cd2856fc4d3644ce9d6cad07205b4343bff8cc6325f3073

  • SHA512

    b076efc436a4930eba88ffd7ed9ab759dcdaf80b0fe0540fe45075226820813813060d8d14a8e8bcc796682cdb7b5a24e75db199ebc681aea33fc10c6b08d399

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeugxi0bJ:NABA

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      1ca8ebf0a3340b2e8cd2856fc4d3644ce9d6cad07205b4343bff8cc6325f3073N.exe

    • Size

      1.9MB

    • MD5

      f4793b0831e941c4c934a9571a77a650

    • SHA1

      9c18d3ae1be0e0643c9967fa2580f0cbc866aa6a

    • SHA256

      1ca8ebf0a3340b2e8cd2856fc4d3644ce9d6cad07205b4343bff8cc6325f3073

    • SHA512

      b076efc436a4930eba88ffd7ed9ab759dcdaf80b0fe0540fe45075226820813813060d8d14a8e8bcc796682cdb7b5a24e75db199ebc681aea33fc10c6b08d399

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeugxi0bJ:NABA

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks