Overview

overview

10

Static

static

10

658f745a21...b5.exe

windows7-x64

10

658f745a21...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    658f745a21a3b48d0c733077a4e23b5b61f3346548a890341dce036c9cc424b5.exe

  • Size

    1.6MB

  • Sample

    250201-mbt3asxpa1

  • MD5

    f7951b85decd48f09f4b091ab9f2aab2

  • SHA1

    792d2221be31beb9c799f80f031d9a9d501f4135

  • SHA256

    658f745a21a3b48d0c733077a4e23b5b61f3346548a890341dce036c9cc424b5

  • SHA512

    e24dda67756d36f50d4fb603b493a0cb4d06e364ac2e377aa6feab54dec46961ae0e891a26b9a157486b99dbfe0348fc4467407c50839f9e146263fbcbeccb6a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zS:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYC

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      658f745a21a3b48d0c733077a4e23b5b61f3346548a890341dce036c9cc424b5.exe

    • Size

      1.6MB

    • MD5

      f7951b85decd48f09f4b091ab9f2aab2

    • SHA1

      792d2221be31beb9c799f80f031d9a9d501f4135

    • SHA256

      658f745a21a3b48d0c733077a4e23b5b61f3346548a890341dce036c9cc424b5

    • SHA512

      e24dda67756d36f50d4fb603b493a0cb4d06e364ac2e377aa6feab54dec46961ae0e891a26b9a157486b99dbfe0348fc4467407c50839f9e146263fbcbeccb6a

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zS:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYC

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks