xmrig | 927c61118c73fb971ed9b4dac881f2c2e5ef5c6ceb41bb0f9d9daba37df79ce4

Analysis

max time kernel
151s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 01:44

Target
2024-03-25_06526d562023a0c6b95c8df64fe0b651_cobalt-strike_cobaltstrike.exe
Size 5.9MB
Sample240325-b52hpafe4t
SHA256 927c61118c73fb971ed9b4dac881f2c2e5ef5c6ceb41bb0f9d9daba37df79ce4
MD5 06526d562023a0c6b95c8df64fe0b651
SHA1 ae0c780601622ee85eec01416626f8d4bb1edfb5
SHA512 e5281a650d495fd75c05f379f14166fe6b754597557d24f74e0d2a314ed99a1c37982e7a9be3a3844bb29bdafd50f72b593d46000dd4897a6848b33f488be7d9
SSDEEP 98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lU1:E+v56utgpPF8u/71
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4720-0-0x00007FF7CD740000-0x00007FF7CDA94000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/4720-0-0x00007FF7CD740000-0x00007FF7CDA94000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4720-0-0x00007FF7CD740000-0x00007FF7CDA94000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-03-25_06526d562023a0c6b95c8df64fe0b651_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-25_06526d562023a0c6b95c8df64fe0b651_cobalt-strike_cobaltstrike.exe"
1⤵
PID:4720