Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 04:59

General

  • Target

    2024-05-24_718b931359ccb1c1d9239a6005bfb0a7_polyvice_xmrig.exe

  • Size

    8.0MB

  • MD5

    718b931359ccb1c1d9239a6005bfb0a7

  • SHA1

    552e2bb6fd59889f28aba695963ac9a2ce146507

  • SHA256

    c6d16c0752266fadbe95a94eb9b9ca98525ca9e30b67d71fee9cb7b678b2f4ed

  • SHA512

    4d8f57ad9043508ba5a98df0cc02a6218895aba9a87ce25ecc140a841b7d34e8acd3e5007d6a05aa41d4cf032ad60b11de6eb86c7a90484fd1affc60aeb1b3dc

  • SSDEEP

    98304:6l4m8wS0SK6tXhV7JyA2oGUUqErEE5clz3YkUG4rLpru+fTZkIT6SfEr+HLKxoIj:8F3ks4TIwcIhLDrZNsO2fTNF

Score
10/10

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-24_718b931359ccb1c1d9239a6005bfb0a7_polyvice_xmrig.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-24_718b931359ccb1c1d9239a6005bfb0a7_polyvice_xmrig.exe"
    1⤵
      PID:3020

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3020-0-0x00000000003E0000-0x0000000000400000-memory.dmp

      Filesize

      128KB

    • memory/3020-1-0x000000013F300000-0x000000013FE1F000-memory.dmp

      Filesize

      11.1MB