xmrig | 2176edd45b1b1b38e88bf03f21849666ba4f899d168bd93e33ce2cff9f04d229

Analysis

max time kernel
146s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 01:58

Target
2024-03-25_cd2a1cd13efa38f46e6c6997c34d9dfc_cobalt-strike_cobaltstrike.exe
Size 5.9MB
Sample240325-cebd9afh3t
SHA256 2176edd45b1b1b38e88bf03f21849666ba4f899d168bd93e33ce2cff9f04d229
MD5 cd2a1cd13efa38f46e6c6997c34d9dfc
SHA1 e486e8a4b79554102e45bc6ad3ea3b4c9ff513f7
SHA512 d49057528ca43e0295ce7112236274463d6d9517acd6ba7aa18938d373a7d8ada749c282bb73aee529981cc927310ef859448c74822f0e4471952a5fef7d8b34
SSDEEP 98304:demTLkNdfE0pZ3656utgpPFotBER/mQ32lUq:E+v56utgpPF8u/7q
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/3136-0-0x00007FF6D6E70000-0x00007FF6D71C4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/3136-0-0x00007FF6D6E70000-0x00007FF6D71C4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3136-0-0x00007FF6D6E70000-0x00007FF6D71C4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-03-25_cd2a1cd13efa38f46e6c6997c34d9dfc_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-25_cd2a1cd13efa38f46e6c6997c34d9dfc_cobalt-strike_cobaltstrike.exe"
1⤵
PID:3136