xmrig | 0ab238dfaa5cfa34a8df72b180a7ba7a4b9feb39969100b969051f992eaa056c

Analysis

max time kernel
135s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 23:09

Target
2024-05-26_ebaebdb13e2e4c61d13facce8b07b1bc_cobalt-strike_cobaltstrike.exe
Size 6.0MB
Sample240526-25csfagd78
SHA256 0ab238dfaa5cfa34a8df72b180a7ba7a4b9feb39969100b969051f992eaa056c
MD5 ebaebdb13e2e4c61d13facce8b07b1bc
SHA1 dc22313de89da098b66190de09cef9bd3d668922
SHA512 4ceb4de0c3c0371bcb11fd48bef27bb0bdcfc22d5c8f2a23eddae0aa5e2fbd5446f013237613a015864920bb092a35b9a9a12fa15a3dd2dff4f3172b264d2faa
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUq:eOl56utgpPF8u/7q
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/1556-0-0x00007FF61C180000-0x00007FF61C4D4000-memory.dmp	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/1556-0-0x00007FF61C180000-0x00007FF61C4D4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1556-0-0x00007FF61C180000-0x00007FF61C4D4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-05-26_ebaebdb13e2e4c61d13facce8b07b1bc_cobalt-strike_cobaltstrike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-26_ebaebdb13e2e4c61d13facce8b07b1bc_cobalt-strike_cobaltstrike.exe"
1⤵
PID:1556