xmrig | 946e7ca7320f0fd8242fc280f2fe327f2048e81566bcd2d922dd80ce17ed8292

Analysis

max time kernel
93s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 23:06

Target
2024-05-26_96bf0184b538218c58f3a1fb1e335bd1_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240526-23qlhsfd7v
SHA256 946e7ca7320f0fd8242fc280f2fe327f2048e81566bcd2d922dd80ce17ed8292
MD5 96bf0184b538218c58f3a1fb1e335bd1
SHA1 21e6f699f8d088e4ec5eec84a3274003752e975c
SHA512 d4a97cda39468ad9bda267350c900f9171a3a4cdbc01e773fb9486f5b2e86d20fd17c5c9d64e21e4e471d97719da949917441fd162587dda4e08ec08a9c9b9c7
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUO:eOl56utgpPF8u/7O
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/2384-0-0x00007FF78BFE0000-0x00007FF78C334000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2384-0-0x00007FF78BFE0000-0x00007FF78C334000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2384-0-0x00007FF78BFE0000-0x00007FF78C334000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-26_96bf0184b538218c58f3a1fb1e335bd1_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-26_96bf0184b538218c58f3a1fb1e335bd1_cobalt-strike_cobaltstrike.exe"
1⤵
PID:2384