Resubmissions
01/09/2024, 09:54
240901-lxjm1sxhld 1001/09/2024, 07:46
240901-jlztravfjr 1001/09/2024, 06:15
240901-gzwcdatgmh 10Analysis
-
max time kernel
1791s -
max time network
1799s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
01/09/2024, 09:54
General
-
Target
xmrig- plus/13 rx.unmineable.bat
-
Size
127B
-
MD5
5d211a59dce5b7be814d8718f594feb7
-
SHA1
b1703b40281c1d5db193331350d7f5edf45847a7
-
SHA256
05ed30ee3a1348bbc6e67a6ac725eab176c0e44f870a177e3e26c0a6ebc78067
-
SHA512
7476759ca3471f70153e2c570b0fe0824ab8b85b8cd4d416614cfa2f220dec799d053f303ebf11010c0ca83ac190625d6912a630bda982082f0bed48c651a39c
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 63 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\xmrig- plus\13 rx.unmineable.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\xmrig- plus\xmrig.exexmrig.exe -o stratum+ssl://rx.unmineable.com:443 -a rx -k -u USDT:TFbVps6AMb9D129FuKsMvoDdU5zppckfWp.CPU_x8w8-w05n -p x2⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
12.2MB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
12.2MB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB
-
Filesize
12.2MB