xmrig | 4dcae2882debc7e7a1e23c10e36999bd2e240e1a2c1e25db85fac92fb99d5bbe

General

Target
2026-08-30_e29423dafb701e6c59c464a88cbe4245_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
Size 2.5MB
Sample260831-cvpa2stdpc
SHA256 4dcae2882debc7e7a1e23c10e36999bd2e240e1a2c1e25db85fac92fb99d5bbe
MD5 e29423dafb701e6c59c464a88cbe4245
SHA1 ffc3d101ce2693775e906cac3874607b11b9088d
SHA512 3e57e147ab6052750f25a424ca3420eb5ad43f6c8ea04da807e0bb324cd60e13e37c58450e59069fad35b32d442bcc502b39a2c485b4da6b7ef4eaf7b2fe8bef
SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrM0LSIbi:w0GnJMOWPClFdx6e0EALKWVTffZiPAcb
TLSH
T11DC5BE6D725081F9D6AB9038C91A480FE7F534E9536495EB0AA457DE2F237C0CA3BF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-30_e29423dafb701e6c59c464a88cbe4245_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 4dcae2882debc7e7a1e23c10e36999bd2e240e1a2c1e25db85fac92fb99d5bbe
- MD5 e29423dafb701e6c59c464a88cbe4245
- SHA1 ffc3d101ce2693775e906cac3874607b11b9088d
- SHA512 3e57e147ab6052750f25a424ca3420eb5ad43f6c8ea04da807e0bb324cd60e13e37c58450e59069fad35b32d442bcc502b39a2c485b4da6b7ef4eaf7b2fe8bef
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrM0LSIbi:w0GnJMOWPClFdx6e0EALKWVTffZiPAcb
- TLSH
  T11DC5BE6D725081F9D6AB9038C91A480FE7F534E9536495EB0AA457DE2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

xmrig miner upx persistence privilege_escalation
- Family: xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- UPX dump on OEP (original entry point)
- XMRig Miner payload
  miner
- Executes dropped EXE
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Privilege Escalation

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: xmrig

UPX dump on OEP (original entry point)

XMRig Miner payload

Executes dropped EXE

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2