xmrig | 5a419d0e0bc167cf8578164c181b249301c7c89a8226f4072aeceb964166f5a3

Analysis

max time kernel
133s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 19:56

Target
2024-05-22_7517d14dcfee7b6d893fd113d71e83e5_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240522-yn4caaec91
SHA256 5a419d0e0bc167cf8578164c181b249301c7c89a8226f4072aeceb964166f5a3
MD5 7517d14dcfee7b6d893fd113d71e83e5
SHA1 7e921b536bec05b87c1facf4130e575e1b6bc5f5
SHA512 09590f3e1b2a1dbb762528b7c634f8d038c5d7db798d4ca99ca981f463cae3c4b5f0001a4dc4677f23f7b681cc3d1e5a3db309571ea135564c9500392fa60eaa
SSDEEP 98304:DhwvFtXdfE0pZxb56utgpPFotBER/mQ32lUx:FCl56utgpPF8u/7x
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/3356-0-0x00007FF763D10000-0x00007FF764064000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/3356-0-0x00007FF763D10000-0x00007FF764064000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3356-0-0x00007FF763D10000-0x00007FF764064000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-22_7517d14dcfee7b6d893fd113d71e83e5_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_7517d14dcfee7b6d893fd113d71e83e5_cobalt-strike_cobaltstrike.exe"
1⤵
PID:3356

memory/3356-0-0x00007FF763D10000-0x00007FF764064000-memory.dmp

Download