Analysis
-
max time kernel
132s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19-02-2024 00:49
General
-
Target
2024-02-19_6be0f834a897c1f967c46420d2c0f4bb_cobalt-strike_cobaltstrike.exe
-
Size
6.0MB
-
MD5
6be0f834a897c1f967c46420d2c0f4bb
-
SHA1
10279026995caea25255e0723cf8e710aea1de12
-
SHA256
ed556dc57b9512c525d599a50d1340d5e61cf229722ffd0c993676318f56f041
-
SHA512
b883a2e8b7166d4bea418f686173a91fbdfbf980a3e5195ee6ae70954186288e1c88cc1fb7d7c28ee410ea454c6ce05c9086d24da38a5b74b729fc1eeb654c27
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lU8:eOl56utgpPF8u/78
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_6be0f834a897c1f967c46420d2c0f4bb_cobalt-strike_cobaltstrike.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_6be0f834a897c1f967c46420d2c0f4bb_cobalt-strike_cobaltstrike.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB