privateloader

General

Target

2025-03-30_53c115ff3a991b9ee6b5acc81cec1705_aspxspy_black-basta_poison-ivy_xmrig
Size

2.6MB
Sample

250330-nrgycaxyas
MD5

53c115ff3a991b9ee6b5acc81cec1705
SHA1

44aae5583c41c26f0996153ec791f532c7f9dcd2
SHA256

197002fde0ee9defae2c9a01f6eb1a79550abc24382c8dce4d26fd093f3f6d35
SHA512

03901f8ce9b0ed7a84eeaa9c858d820f041fce2411474e970d802fbf7400d1d25a3953f87dd8c0632830ccb867141b9bd07604ca8caeb1b34d06a2ff28041afd
SSDEEP

49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWHEDzshqXR:w0GnJMOWPClFdx6e0EALKWVTffZiPAcw

Score

10^/10

Malware Config

Targets

- Target
  
  2025-03-30_53c115ff3a991b9ee6b5acc81cec1705_aspxspy_black-basta_poison-ivy_xmrig
- Size
  
  2.6MB
- MD5
  
  53c115ff3a991b9ee6b5acc81cec1705
- SHA1
  
  44aae5583c41c26f0996153ec791f532c7f9dcd2
- SHA256
  
  197002fde0ee9defae2c9a01f6eb1a79550abc24382c8dce4d26fd093f3f6d35
- SHA512
  
  03901f8ce9b0ed7a84eeaa9c858d820f041fce2411474e970d802fbf7400d1d25a3953f87dd8c0632830ccb867141b9bd07604ca8caeb1b34d06a2ff28041afd
- SSDEEP
  
  49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWHEDzshqXR:w0GnJMOWPClFdx6e0EALKWVTffZiPAcw
Score

10^/10

privateloader xmrig loader miner upx
- PrivateLoader
  PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
  loader privateloader
- Privateloader family
  privateloader
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Privateloader family

Xmrig family

xmrig

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2