Analysis
-
max time kernel
138s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
10/06/2024, 12:49
General
-
Target
2024-06-10_22acef9db62e1c3ec3f70f1d8e13c1bc_polyvice_xmrig.exe
-
Size
7.0MB
-
MD5
22acef9db62e1c3ec3f70f1d8e13c1bc
-
SHA1
c37f88727caa4f98e9434119ccf40b3f7d1043e8
-
SHA256
b97bde9fbe0f165d5148d24f208343df8fb6e53892b523e29e2fb0697ae0d3f5
-
SHA512
3fae5fc249f2e7ba77bb39abdad7d7cc4f068e49f48cecf20f32bfa07a01d97a5bb8ff2601a5a74fb4098453153a120a22ef3480ea03588714dff3705fee53d8
-
SSDEEP
98304:xvdtTPY39rMCEIrcMGmME5wKFtL6qonvV8c1cxRc7JcMqM0p+NUyXrqC6asF/FBa:xsS1cQcKqC6asFzj8rSK
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-10_22acef9db62e1c3ec3f70f1d8e13c1bc_polyvice_xmrig.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-10_22acef9db62e1c3ec3f70f1d8e13c1bc_polyvice_xmrig.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
10.1MB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
10.1MB
-
Filesize
10.1MB
-
Filesize
10.1MB
-
Filesize
10.1MB
-
Filesize
10.1MB
-
Filesize
10.1MB