xmrig | 52cdee378d8456b1b7e75bb1ef5d5613716f55d019e70eaa8e55436bc3b458f2

Analysis

max time kernel
140s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18/05/2024, 14:05

Target
2024-05-18_91bba8ab18b29a3b0095baeb976f56f5_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240518-rd11vaeh8t
SHA256 52cdee378d8456b1b7e75bb1ef5d5613716f55d019e70eaa8e55436bc3b458f2
MD5 91bba8ab18b29a3b0095baeb976f56f5
SHA1 aa0db83cf6eef44f2841db23945ebd4c8135246d
SHA512 bf02d76fac4b2d0317e9d711599c18e1569e8af838e7573c6f36b564b58b277d291c26aa7bf5434aad5696a47e8cc19ea665dfa0bcbf01d229d3456b4b097706
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lU3:eOl56utgpPF8u/73
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/224-0-0x00007FF60C8B0000-0x00007FF60CC04000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/224-0-0x00007FF60C8B0000-0x00007FF60CC04000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/224-0-0x00007FF60C8B0000-0x00007FF60CC04000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-18_91bba8ab18b29a3b0095baeb976f56f5_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-18_91bba8ab18b29a3b0095baeb976f56f5_cobalt-strike_cobaltstrike.exe"
1⤵
PID:224