Analysis
-
max time kernel
135s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 07:31
General
-
Target
1235dfd18d0f6df36733b1143d1cc330.exe
-
Size
784KB
-
MD5
1235dfd18d0f6df36733b1143d1cc330
-
SHA1
fc96a6910fe660ed53faba402a9bcca2a6bc4578
-
SHA256
02d6f7fa42b6f272b62c320a2989f938db7f4be91228a3b4eb45e748423b0e29
-
SHA512
79bfb7826189c05d2688e03969c2db0e9f2ad75d99e248a5256a083f804e5e372a265975f2859cb0f5ab322e6287bb22a1ec3a57a76c7879fdaf242e90147625
-
SSDEEP
12288:VkWLkT2kMoA/Bfum/8q4+5E8OiyD1rEgnjJald1G1zshb5mZfYT5+7IBRPZO1/RZ:fLki7odg8mE79FLc01zsCGtz2/YB
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 6 IoCs
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1235dfd18d0f6df36733b1143d1cc330.exe"C:\Users\Admin\AppData\Local\Temp\1235dfd18d0f6df36733b1143d1cc330.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1235dfd18d0f6df36733b1143d1cc330.exeC:\Users\Admin\AppData\Local\Temp\1235dfd18d0f6df36733b1143d1cc330.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
784KB
MD55d24db24078ba380f6fa326a14bdabea
SHA1f192227fee70775187a3fa72a5b365dd24ce50f1
SHA256d5c41512c741732dda76f090ecec9c2d6aa0943d996d0ca28ad00802c2a15427
SHA5124cb9da88a34aeb36e071d1ca163d33de25ae29b3e1bf9afbb0e87941fea5b35a334a94bd049b1bb1c565035ad90d4f7b43ae9796262e03d24733855c0f38d8cb
-
Filesize
3.1MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
3.1MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
1.6MB