Overview

overview

10

Static

static

10

4ecb5d0ca7...d1.exe

windows7-x64

10

4ecb5d0ca7...d1.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2024 10:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ecb5d0ca7be12d9bafdafd7819f6005b23bcf57860eee5477cb2cbac31ed2d1.exe

  • Size

    5.9MB

  • MD5

    6d7129dd5d04eeb2bf161eb054273b34

  • SHA1

    fc9f96c5dc9f00c15340da8c8b2eae7d298fbc50

  • SHA256

    4ecb5d0ca7be12d9bafdafd7819f6005b23bcf57860eee5477cb2cbac31ed2d1

  • SHA512

    99fc38762708736aeaeceb810c4dc10702dcad025b7b62558e7fe4f2a9533783bf32c181358e35578f2a46435bff09bc21b4a680f1000476cb63427cdd9c4a1b

  • SSDEEP

    98304:demTLkNdfE0pZ3u56utgpPFotBER/mQ32lUl:E+b56utgpPF8u/7l

Score
10/10
xmrigminerupx

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner payload 1 IoCs
    miner
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ecb5d0ca7be12d9bafdafd7819f6005b23bcf57860eee5477cb2cbac31ed2d1.exe
    "C:\Users\Admin\AppData\Local\Temp\4ecb5d0ca7be12d9bafdafd7819f6005b23bcf57860eee5477cb2cbac31ed2d1.exe"
    1⤵
      PID:3980
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1748,i,4686244434963378549,11462511444150484980,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:8
      1⤵
        PID:1276

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3980-0-0x00007FF7F9210000-0x00007FF7F9564000-memory.dmp

        Filesize

        3.3MB

        Download