Overview

overview

10

Static

static

10

2025-05-11...ig.exe

windows10-2004-x64

10

2025-05-11...ig.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2025-05-11_ff996e298ca8df9b5bf5fb2a28bdd6af_aspxspy_black-basta_poison-ivy_xmrig

  • Size

    2.7MB

  • Sample

    250511-gksb6swsdx

  • MD5

    ff996e298ca8df9b5bf5fb2a28bdd6af

  • SHA1

    cda087cef140a1ce8f5341d9fd3f56d00a9a05ec

  • SHA256

    ef5f677774c123302378c32c263112d5f9785fb80f3b02c7b8d3ea4503042900

  • SHA512

    9fc3681784bb3c7413f63a36e6b44d234fdc54fafab4efb675605e854f2482a06da0cc4200782459df71cf0ce53990aeb91eec7cbc03be818943982dbfd6e7bf

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xDyNdHs:w0GnJMOWPClFdx6e0EALKWVTffZiPAcN

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      2025-05-11_ff996e298ca8df9b5bf5fb2a28bdd6af_aspxspy_black-basta_poison-ivy_xmrig

    • Size

      2.7MB

    • MD5

      ff996e298ca8df9b5bf5fb2a28bdd6af

    • SHA1

      cda087cef140a1ce8f5341d9fd3f56d00a9a05ec

    • SHA256

      ef5f677774c123302378c32c263112d5f9785fb80f3b02c7b8d3ea4503042900

    • SHA512

      9fc3681784bb3c7413f63a36e6b44d234fdc54fafab4efb675605e854f2482a06da0cc4200782459df71cf0ce53990aeb91eec7cbc03be818943982dbfd6e7bf

    • SSDEEP

      49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xDyNdHs:w0GnJMOWPClFdx6e0EALKWVTffZiPAcN

    Score
    10/10
    xmrigminerupxpersistenceprivilege_escalation

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks

OSZAR »