xmrig | 4cae79402a1395ef2a1920489fd9565cb49a95341a0126515e852aac2e419cbe

Analysis

max time kernel
139s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18/05/2024, 14:09

Target
2024-05-18_e38135f4adb28889504bd18eefb3f4d3_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240518-rf3x8afa71
SHA256 4cae79402a1395ef2a1920489fd9565cb49a95341a0126515e852aac2e419cbe
MD5 e38135f4adb28889504bd18eefb3f4d3
SHA1 8f1de126fbf6c5523352f422240dd7e9c06e1f20
SHA512 48aac599f288fa3e40abdd7c0cb9018ac22edf21cc323181c1ae4041b5e0d75d426f5ec38500c47cd6d0a4e2b8b720dce30c55fe7af4d16e45490329e9d3d2f2
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUZ:eOl56utgpPF8u/7Z
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/2388-0-0x00007FF7E34A0000-0x00007FF7E37F4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2388-0-0x00007FF7E34A0000-0x00007FF7E37F4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2388-0-0x00007FF7E34A0000-0x00007FF7E37F4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-18_e38135f4adb28889504bd18eefb3f4d3_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-18_e38135f4adb28889504bd18eefb3f4d3_cobalt-strike_cobaltstrike.exe"
1⤵
PID:2388