Overview

overview

10

Static

static

10

2025-04-07...ig.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-07_63f41cbe2726217b95b91b7eea0fca44_black-basta_ezcob_xmrig

  • Size

    4.4MB

  • Sample

    250407-nbdwraxtey

  • MD5

    63f41cbe2726217b95b91b7eea0fca44

  • SHA1

    67e7904b518626ebd99e6f4dcce9d51c35403420

  • SHA256

    d75045c6e948268d55d0ff970c824cfc8e3591edb9be7d2fe2eb15a4d3a135b7

  • SHA512

    b190f12c44b184ba2e1ac93dc7b4a4e869414f3c0b3e3f50ac861ae49af2cabcf8c6acf9e9556d55358e601486c8ad246fba7810ecf0f753b468d44a9de1e5de

  • SSDEEP

    98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr87:zbBeSFkd

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2025-04-07_63f41cbe2726217b95b91b7eea0fca44_black-basta_ezcob_xmrig

    • Size

      4.4MB

    • MD5

      63f41cbe2726217b95b91b7eea0fca44

    • SHA1

      67e7904b518626ebd99e6f4dcce9d51c35403420

    • SHA256

      d75045c6e948268d55d0ff970c824cfc8e3591edb9be7d2fe2eb15a4d3a135b7

    • SHA512

      b190f12c44b184ba2e1ac93dc7b4a4e869414f3c0b3e3f50ac861ae49af2cabcf8c6acf9e9556d55358e601486c8ad246fba7810ecf0f753b468d44a9de1e5de

    • SSDEEP

      98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr87:zbBeSFkd

    Score
    10/10
    xmrigexecutionminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks