Overview

overview

10

Static

static

10

2025-04-07...ig.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-07_b99e9acc671ed4ddd3bdde2ec043f8f5_black-basta_ezcob_xmrig

  • Size

    2.4MB

  • Sample

    250407-m9vfqaxtbv

  • MD5

    b99e9acc671ed4ddd3bdde2ec043f8f5

  • SHA1

    ee7ff75c354c871e1b69e93420df9194d75d678f

  • SHA256

    fff079c8b50c861da11d61758ca7a47eb86d47bbe5a049a2f6d829df950d1791

  • SHA512

    d5c45aa70f24df5f71692b8666077371a3ce4e7741f810fa65b6ffa30280a4aaf669cb911f0c4f7207ade1153c2948a4c8dd235e829fa08a8148ba0035bd85db

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5V2yZsC:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rh

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2025-04-07_b99e9acc671ed4ddd3bdde2ec043f8f5_black-basta_ezcob_xmrig

    • Size

      2.4MB

    • MD5

      b99e9acc671ed4ddd3bdde2ec043f8f5

    • SHA1

      ee7ff75c354c871e1b69e93420df9194d75d678f

    • SHA256

      fff079c8b50c861da11d61758ca7a47eb86d47bbe5a049a2f6d829df950d1791

    • SHA512

      d5c45aa70f24df5f71692b8666077371a3ce4e7741f810fa65b6ffa30280a4aaf669cb911f0c4f7207ade1153c2948a4c8dd235e829fa08a8148ba0035bd85db

    • SSDEEP

      49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5V2yZsC:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rh

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks