Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 19:58
General
-
Target
dff8fe3ca30ac2071289e87ac8415d97.exe
-
Size
784KB
-
MD5
dff8fe3ca30ac2071289e87ac8415d97
-
SHA1
a51ae1b80239e953fdc15cc6969d57ac6a2eb930
-
SHA256
d2fa8f50f3fbfc6be4d2d3839c17b2c77ccef1955e75753e03412a3b489bdb19
-
SHA512
7dc30cfb2c78ba3ea55e8751429df455fa7413bf2580c3a834d92a62a9d59f0d5f2f711d514c793d0d35ec70ce47f04eca2e1f90ce9053f545a265c70a0a1e31
-
SSDEEP
12288:OUdnSWhHet9sfaeSX8c5rQV3nmJZ+beUzCM+iK72TVBIhqtdVVO3pN1lQG0:vSWhHeboi0VgE/zCxik2/I8BM3pN1+
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 6 IoCs
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dff8fe3ca30ac2071289e87ac8415d97.exe"C:\Users\Admin\AppData\Local\Temp\dff8fe3ca30ac2071289e87ac8415d97.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\dff8fe3ca30ac2071289e87ac8415d97.exeC:\Users\Admin\AppData\Local\Temp\dff8fe3ca30ac2071289e87ac8415d97.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
784KB
MD5d742299ff80710699796dea1c818292c
SHA1b0119989c4bed59e689454fad2852609afb01159
SHA256d5a8f66fb6b1ee55f54e14d03820df0037cc9de2ce3e6d471d0e6f123cbdba47
SHA51280d120bb17f9e9d19c4c4866235486b0472cbbcd10d73a416825c5122f094fee392c52d0a4ba748c2b34a775b530cc408c56758f97df7b71a247148839e242d5
-
Filesize
3.1MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
784KB
-
Filesize
1.6MB
-
Filesize
3.1MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB