437e1e9d471118c296359bcfc1d6b3a197d36d11e37727a380ef7a09632509d9

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-01-2023 02:44

Target

xmrig-6.18.1/benchmark_10M.cmd
Size

56B
MD5

14b1ce42ded2df03638180864e4d056f
SHA1

cbc1b3edd1942630f6363f3ccae574283b14c260
SHA256

bdec0d2ea20decc25659f26c7bfd7a78fb0e51cc100443b8a35c43206d2eb86a
SHA512

d8297c2728245b570ad71b8062a17e28e2d9e72bf8be773bb92828e57912cdd0a6ec35fe244069a5fdaf3be8cfe3997c403ea551b81be5708dd80c6eb5f6e458

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
648	Process not Found

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4108	xmrig.exe
Token: SeLockMemoryPrivilege	4108	xmrig.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4108	xmrig.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 4108	4548	cmd.exe	82
PID 4548 wrote to memory of 4108	4548	cmd.exe	82

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\xmrig-6.18.1\benchmark_10M.cmd"
1⤵
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Users\Admin\AppData\Local\Temp\xmrig-6.18.1\xmrig.exe
  xmrig.exe --bench=10M --submit
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:4108

memory/4108-133-0x00000275826B0000-0x00000275826D0000-memory.dmp

Filesize
128KB

Download
memory/4108-134-0x0000027583FB0000-0x0000027583FF0000-memory.dmp

Filesize
256KB

Download
memory/4108-135-0x0000027583FF0000-0x0000027584010000-memory.dmp

Filesize
128KB

Download
memory/4108-136-0x00000276169D0000-0x00000276169F0000-memory.dmp

Filesize
128KB

Download
memory/4108-137-0x0000027583FF0000-0x0000027584010000-memory.dmp

Filesize
128KB

Download
memory/4108-138-0x00000276169D0000-0x00000276169F0000-memory.dmp

Filesize
128KB

Download