xmrig | ad0c7ac386f7be591319d8d411000c540191e907ec56441b1fedf32f781efda4

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 01:56

Target
2024-03-25_bd8dff30e505e066ff3f754ce3ba0f60_cobalt-strike_cobaltstrike.exe
Size 5.9MB
Sample240325-ccph4afg8v
SHA256 ad0c7ac386f7be591319d8d411000c540191e907ec56441b1fedf32f781efda4
MD5 bd8dff30e505e066ff3f754ce3ba0f60
SHA1 ebb498b7e47e20596b7c547792722af00cb29d88
SHA512 727b1ff293909eae007e31c36db6600e0654d5110ea9bfc019aa91aa824e4eab797b7e3fbfd535363b1b67099e9bc5ecb5a8c72b860cab4d825fe4f62420f030
SSDEEP 98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lUB:E+v56utgpPF8u/7B
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4584-0-0x00007FF78C9A0000-0x00007FF78CCF4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/4584-0-0x00007FF78C9A0000-0x00007FF78CCF4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4584-0-0x00007FF78C9A0000-0x00007FF78CCF4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-03-25_bd8dff30e505e066ff3f754ce3ba0f60_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-25_bd8dff30e505e066ff3f754ce3ba0f60_cobalt-strike_cobaltstrike.exe"
1⤵
PID:4584