xmrig | 3f8b6519d429fe7528f22920055a41b69b3abefce167d41afa07be7374762c4f

Analysis

max time kernel
139s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 20:02

Target
2024-05-22_b39408e66fd0f6b38b4dbc931278b89f_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240522-ysejqaef59
SHA256 3f8b6519d429fe7528f22920055a41b69b3abefce167d41afa07be7374762c4f
MD5 b39408e66fd0f6b38b4dbc931278b89f
SHA1 cb0ba336aa625853e779abbd5e6926ce553e421c
SHA512 61ac5c46a33c86936048ba682eed53a87c2d3be634484e18c6fabe848f6ca281dee3bd78b3e1cb8c435cd52497228cc7756f5c4f63d7a4bf6c7484bd3b74f113
SSDEEP 98304:DhwvFtXdfE0pZxb56utgpPFotBER/mQ32lUB:FCl56utgpPF8u/7B
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/2192-0-0x00007FF77A5A0000-0x00007FF77A8F4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2192-0-0x00007FF77A5A0000-0x00007FF77A8F4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2192-0-0x00007FF77A5A0000-0x00007FF77A8F4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-22_b39408e66fd0f6b38b4dbc931278b89f_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_b39408e66fd0f6b38b4dbc931278b89f_cobalt-strike_cobaltstrike.exe"
1⤵
PID:2192