xmrig | 93cc82386a9522b6a23f8225b5a77d89497d77af5b7ee9fa99955a0440eb608b

Analysis

max time kernel
93s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 02:00

Target
2024-03-25_d5bf0866022857d7f514c6550152e96c_cobalt-strike_cobaltstrike.exe
Size 5.9MB
Sample240325-ce5m4ach97
SHA256 93cc82386a9522b6a23f8225b5a77d89497d77af5b7ee9fa99955a0440eb608b
MD5 d5bf0866022857d7f514c6550152e96c
SHA1 71b932021079b0878fd8cf950191620a1b4b9578
SHA512 7115c7bf9d827c53d639344d54db6e124279ebd17c26b2f656a21b2109b8b73efa12617dcb06508b73c442662f0d7dce760f7995487b8015a64814140db6081d
SSDEEP 98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lUi:E+v56utgpPF8u/7i
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4040-0-0x00007FF73E680000-0x00007FF73E9D4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/4040-0-0x00007FF73E680000-0x00007FF73E9D4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4040-0-0x00007FF73E680000-0x00007FF73E9D4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-03-25_d5bf0866022857d7f514c6550152e96c_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-25_d5bf0866022857d7f514c6550152e96c_cobalt-strike_cobaltstrike.exe"
1⤵
PID:4040