xmrig | 7bae466e7deafb259339a9ad739bb13d28059848742875c3deacd061f1cbe3ad

Analysis

max time kernel
147s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07/01/2024, 19:38

Target
20240106892b5dae66d5423d94f31179d2a0b6e8cobaltstrikecobaltstrike.exe
Size 6.0MB
Sample240107-ycejsadfc6
SHA256 7bae466e7deafb259339a9ad739bb13d28059848742875c3deacd061f1cbe3ad
MD5 892b5dae66d5423d94f31179d2a0b6e8
SHA1 18c4a6a27c794d67d26e892fcccb836ab3e8847b
SHA512 04f2953f690d9623093cf64740b2755cbb0fa4f9125ce5bf508b25c404f4c747535d1aa25e93daeee520933b6f51c6bd8e15964b42d510430d9d218ca3b87fa9
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUY:eOl56utgpPF8u/7Y
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/784-0-0x00007FF70FFB0000-0x00007FF710304000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/784-0-0x00007FF70FFB0000-0x00007FF710304000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\20240106892b5dae66d5423d94f31179d2a0b6e8cobaltstrikecobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\20240106892b5dae66d5423d94f31179d2a0b6e8cobaltstrikecobaltstrike.exe"
1⤵
PID:784

memory/784-0-0x00007FF70FFB0000-0x00007FF710304000-memory.dmp

Download