Overview

overview

10

Static

static

10

e9b1e5f550...ad.exe

windows7-x64

10

e9b1e5f550...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9b1e5f550decc726eda9555cea203fd59a4748d8b632846cae414ef518a41ad

  • Size

    1.3MB

  • Sample

    240701-erhp7swbqe

  • MD5

    0ff3d053219e3c6854f259434b7e8c69

  • SHA1

    e52f17a47bb04bfa9d0546d213d2ef5c2aec6543

  • SHA256

    e9b1e5f550decc726eda9555cea203fd59a4748d8b632846cae414ef518a41ad

  • SHA512

    2cda1c072443a6fe7bea40146daaf7cdf57ca3244329e7e8c5fcc8bf4d6e239b80de2411f6bc42459f1098b28ed282c4f37b852d0b07de613c68bbc590ac8b1d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7rir+u8bgm90LHdkkJ+GViqQ+1akelBap:knw9oUUEEDlZ6RIHMRe+delw

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      e9b1e5f550decc726eda9555cea203fd59a4748d8b632846cae414ef518a41ad

    • Size

      1.3MB

    • MD5

      0ff3d053219e3c6854f259434b7e8c69

    • SHA1

      e52f17a47bb04bfa9d0546d213d2ef5c2aec6543

    • SHA256

      e9b1e5f550decc726eda9555cea203fd59a4748d8b632846cae414ef518a41ad

    • SHA512

      2cda1c072443a6fe7bea40146daaf7cdf57ca3244329e7e8c5fcc8bf4d6e239b80de2411f6bc42459f1098b28ed282c4f37b852d0b07de613c68bbc590ac8b1d

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlia+zW7rir+u8bgm90LHdkkJ+GViqQ+1akelBap:knw9oUUEEDlZ6RIHMRe+delw

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks