Overview

overview

10

Static

static

10

WinRing0x64.exe

windows7_x64

WinRing0x64.exe

windows10-2004_x64

Windows Up...ce.exe

windows7_x64

10

Windows Up...ce.exe

windows10-2004_x64

1

concrt140.dll

windows7_x64

1

concrt140.dll

windows10-2004_x64

3

msvcp140.dll

windows7_x64

3

msvcp140.dll

windows10-2004_x64

3

msvcp140_1.dll

windows7_x64

1

msvcp140_1.dll

windows10-2004_x64

1

msvcp140_2.dll

windows7_x64

1

msvcp140_2.dll

windows10-2004_x64

1

msvcp140_c...ds.dll

windows7_x64

3

msvcp140_c...ds.dll

windows10-2004_x64

3

vccorlib140.dll

windows7_x64

1

vccorlib140.dll

windows10-2004_x64

3

vcpruntime120.dll

windows7_x64

3

vcpruntime120.dll

windows10-2004_x64

1

vcruntime140.dll

windows7_x64

3

vcruntime140.dll

windows10-2004_x64

3

vcruntime140_1.dll

windows7_x64

3

vcruntime140_1.dll

windows10-2004_x64

3

Analysis

  • max time kernel
    40s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    20-05-2022 05:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Windows Update Service.exe

  • Size

    5KB

  • MD5

    084b7cfbd33d651eb91b5e739b7b7273

  • SHA1

    f4a0b3e186d47cf337181bc43dc0dcf1b3aeda4c

  • SHA256

    0513879a40c9116c6ff959bbec11c2aa45ecfb9324d912fcd061ace056c9ece8

  • SHA512

    7807be70fd20a1ba99d8d8956e736e4326bd6c3da770f6004e9e8ac84b7b725062992da700c8e78ddeed481dbb312d8cbcb73beae8ad055ce69e7d135c450580

Score
10/10
xmrigminer

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner Payload 1 IoCs
    miner

Processes

  • C:\Users\Admin\AppData\Local\Temp\Windows Update Service.exe
    "C:\Users\Admin\AppData\Local\Temp\Windows Update Service.exe"
    1⤵
      PID:2044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2044-54-0x000000013F610000-0x000000013F616000-memory.dmp
      Filesize

      24KB

      Download
    • memory/2044-55-0x000000001BF10000-0x000000001C552000-memory.dmp
      Filesize

      6.3MB

      Download