Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
26-12-2022 17:06
General
-
Target
8ceea3c19dd757165fc4a7597fb9f682.exe
-
Size
5.1MB
-
MD5
8ceea3c19dd757165fc4a7597fb9f682
-
SHA1
d6bd4125d0a7fa22b6edf691d124569d2441c58e
-
SHA256
71a7c75802852bc47630846ce55c037faba06b17035b93ba3bec6538579f3dcd
-
SHA512
77808caf9d40b8e7769dadaac2951e8158df105c98e710f048adaaf2d00d7cb8ace12306f5684f4f456e43be5ec76796d8cc21e7adaef741b2d90d823b3ebbd6
-
SSDEEP
98304:gkOBER7wfiWcNKahSgMk8miYFTG7vLEASMdwu+OAxCAJn9pB964:gkOBy14gXpivLEwz2E4
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 6 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ceea3c19dd757165fc4a7597fb9f682.exe"C:\Users\Admin\AppData\Local\Temp\8ceea3c19dd757165fc4a7597fb9f682.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20.6MB
-
Filesize
20.6MB
-
Filesize
20.6MB
-
Filesize
20.6MB
-
Filesize
128KB
-
Filesize
20.6MB
-
Filesize
3.8MB
-
Filesize
20.6MB