xmrig | 37019da77ffc28c3e37d4e363e489a1f189c65338ea3f5a8b64b92e9640054cc

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 01:06

Target
2024-05-20_16b2f3017cb5750fc25f55c9509e9428_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240520-bghexacg7s
SHA256 37019da77ffc28c3e37d4e363e489a1f189c65338ea3f5a8b64b92e9640054cc
MD5 16b2f3017cb5750fc25f55c9509e9428
SHA1 1418f45b2ffc7f990d6f2acb67539d3767cc64e1
SHA512 00a98613118894dafa246fab767e5ad9079f45951ef80256935e1245adffe47c052749a9a0e0bb82cca5e98462663447f76be4ae24cde5cb542d646a0bde32d4
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUG:eOl56utgpPF8u/7G
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/2820-0-0x00007FF76C1C0000-0x00007FF76C514000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2820-0-0x00007FF76C1C0000-0x00007FF76C514000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2820-0-0x00007FF76C1C0000-0x00007FF76C514000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-20_16b2f3017cb5750fc25f55c9509e9428_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-20_16b2f3017cb5750fc25f55c9509e9428_cobalt-strike_cobaltstrike.exe"
1⤵
PID:2820