xmrig | a3044bc705ea7473025e420392c8ba9663aa0fbb2aaeff25eb27d7e444c71efc

Analysis

max time kernel
136s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 01:11

Target
2024-05-20_381edd2b72c8af18c8b02eeb987eea4a_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240520-bj81mscf62
SHA256 a3044bc705ea7473025e420392c8ba9663aa0fbb2aaeff25eb27d7e444c71efc
MD5 381edd2b72c8af18c8b02eeb987eea4a
SHA1 6b30c931d383e345e96c08ffc95d15fbaebec765
SHA512 02b8e0b0f7db0538e332bc6df560be0106d34fc5ae6d87e85f814be903e9f982b9e5c95158c938dccaddd78fc2bf8ff772b4649e77530a48b3aa592102813acd
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUW:eOl56utgpPF8u/7W
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/2016-0-0x00007FF6EDBB0000-0x00007FF6EDF04000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2016-0-0x00007FF6EDBB0000-0x00007FF6EDF04000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2016-0-0x00007FF6EDBB0000-0x00007FF6EDF04000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-20_381edd2b72c8af18c8b02eeb987eea4a_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-20_381edd2b72c8af18c8b02eeb987eea4a_cobalt-strike_cobaltstrike.exe"
1⤵
PID:2016