xmrig | 24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c | Triage

Submit
Reports

Overview

overview

Static

static

24b36375cd...0c.exe

windows7-x64

24b36375cd...0c.exe

windows10-2004-x64

Sharing

General

Target

24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c
Size

1.4MB
Sample

250202-y86yxaxlds
MD5

47ae13cc614681279f1b1e1aca8ca951
SHA1

0488b09f668753094fb58372dd1a5dc62609a940
SHA256

24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c
SHA512

5f0a603ce9ab4b3890e6987c38b6ffa2652014837a37671b3a9e044e4106cb02aa030664d230eee128f200dbc8ffc6f332507b4c9354f4a0af4705f2ab2566c1
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5p904aohckK:GezaTF8FcNkNdfE0pZ9ozttwIRxGDKZW

Score

10^/10

xmrig miner persistence

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c.exe

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c.exe

Resource

win10v2004-20250129-en

xmrig miner persistence

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c
- Size
  
  1.4MB
- MD5
  
  47ae13cc614681279f1b1e1aca8ca951
- SHA1
  
  0488b09f668753094fb58372dd1a5dc62609a940
- SHA256
  
  24b36375cd8cee80c4c9e6659cf0799e2f01628e13f89c99cba7494e37460d0c
- SHA512
  
  5f0a603ce9ab4b3890e6987c38b6ffa2652014837a37671b3a9e044e4106cb02aa030664d230eee128f200dbc8ffc6f332507b4c9354f4a0af4705f2ab2566c1
- SSDEEP
  
  24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5p904aohckK:GezaTF8FcNkNdfE0pZ9ozttwIRxGDKZW
Score

10^/10

xmrig miner persistence
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

xmrigminerpersistence

© 2018-2025

Terms | Privacy