Overview

overview

10

Static

static

10

70ecc116b1...71.exe

windows7-x64

1

70ecc116b1...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70ecc116b12f58e2d2816f968a253935214d489c059a598196013c7d14258c71.exe

  • Size

    1.1MB

  • Sample

    250201-dwnatatmeq

  • MD5

    4684d0fd885740ddae797397145c6d7c

  • SHA1

    16e8e03bfc090be20370a4d2195aca10121fd30f

  • SHA256

    70ecc116b12f58e2d2816f968a253935214d489c059a598196013c7d14258c71

  • SHA512

    10d23c576e56668cb2323bb3ba29c5987ecdfd3ce28639b6bbbf437da64252d475eb7f9226fbc0d121285ad704cfbecd22beb2fef48ff44882275df459052a67

  • SSDEEP

    24576:L5WSWbZuFbWHS8Zti1tauerlxK+sf0N8zHM/F0GBP87xaVUhffp10NwyG8:LUSQZuFai3aLrHK+fN8zHM2hf70NwyG8

Score
10/10
xmrigexecutionminer

Malware Config

Targets

    • Target

      70ecc116b12f58e2d2816f968a253935214d489c059a598196013c7d14258c71.exe

    • Size

      1.1MB

    • MD5

      4684d0fd885740ddae797397145c6d7c

    • SHA1

      16e8e03bfc090be20370a4d2195aca10121fd30f

    • SHA256

      70ecc116b12f58e2d2816f968a253935214d489c059a598196013c7d14258c71

    • SHA512

      10d23c576e56668cb2323bb3ba29c5987ecdfd3ce28639b6bbbf437da64252d475eb7f9226fbc0d121285ad704cfbecd22beb2fef48ff44882275df459052a67

    • SSDEEP

      24576:L5WSWbZuFbWHS8Zti1tauerlxK+sf0N8zHM/F0GBP87xaVUhffp10NwyG8:LUSQZuFai3aLrHK+fN8zHM2hf70NwyG8

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Drops startup file

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks