xmrig | 2f379ccdeb449ff393e24abc1a7f6b981394249917dd612b7bfc71f757216501

Analysis

max time kernel
90s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 01:49

Target
2024-03-25_68a49b23574ad89f68bebcd93a8612cd_cobalt-strike_cobaltstrike.exe
Size 5.9MB
Sample240325-b812bscg22
SHA256 2f379ccdeb449ff393e24abc1a7f6b981394249917dd612b7bfc71f757216501
MD5 68a49b23574ad89f68bebcd93a8612cd
SHA1 83058618a44f4adfb6756be856d45978dc054191
SHA512 1c2ab988dd57239b96753e8755661c6d68ff1c81c42395942462dd4ac04eec5b169f089d052d404407d606f277e44d4f67acf22e758f0656cff0cd9a0412bbad
SSDEEP 98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lUR:E+v56utgpPF8u/7R
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/3736-0-0x00007FF7CF730000-0x00007FF7CFA84000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/3736-0-0x00007FF7CF730000-0x00007FF7CFA84000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3736-0-0x00007FF7CF730000-0x00007FF7CFA84000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-03-25_68a49b23574ad89f68bebcd93a8612cd_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-25_68a49b23574ad89f68bebcd93a8612cd_cobalt-strike_cobaltstrike.exe"
1⤵
PID:3736