Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09/03/2024, 19:28
General
-
Target
bc9c322bb4a89e7f1ac7d58af49242c3.exe
-
Size
784KB
-
MD5
bc9c322bb4a89e7f1ac7d58af49242c3
-
SHA1
ea104f4c6163bbb908be6be086e0f1e9a82eda03
-
SHA256
80b2650c05d118435e6545de1a11fb7bd6a82070ba6da060f6c3a25e6b7a5bf5
-
SHA512
f26dcf52398186f66c385ae6fb3213bbee320f005dd70808d05cbc11aebb2d3a1743d6cc77e5b860f158d6a02945c2503ece4c2118cc221bf41823dea582a045
-
SSDEEP
12288:QXWxLzXU71z/kgduTyeLL8ywV/QqexMLCkZ8VTOzOlAeSYh5o5bjCJ1ELrtjp:QXWxbW/d0ys3QexMLZqOteT8jC7EnD
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 7 IoCs
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc9c322bb4a89e7f1ac7d58af49242c3.exe"C:\Users\Admin\AppData\Local\Temp\bc9c322bb4a89e7f1ac7d58af49242c3.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\bc9c322bb4a89e7f1ac7d58af49242c3.exeC:\Users\Admin\AppData\Local\Temp\bc9c322bb4a89e7f1ac7d58af49242c3.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
784KB
MD5ab5d086d4712a5e060d48f036239fc10
SHA1f3c7c90a7ba9d47eb323a8102f65a2e0c503b736
SHA256549f6018f9a8f53503a3e6277ec57e1dc4b5b3fb96c7ed35d104a97a184ae3b1
SHA512d36a60bf71bae215c27140d9823bb4f44f204687f745cabd8bb695fcc9f94407756ee32df916790513fd2cd0294dd65b6070c0a7a6dd0a690d4c652473ad0580
-
Filesize
3.1MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
3.1MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
1.6MB