Analysis
-
max time kernel
93s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/09/2024, 09:03
General
-
Target
2024-09-04_1093929d21cf1c8f7448fe71a6913a9c_cobalt-strike_cobaltstrike_poet-rat.exe
-
Size
6.0MB
-
MD5
1093929d21cf1c8f7448fe71a6913a9c
-
SHA1
92b7e22262980fcdf3b2ed58866910153d298455
-
SHA256
df05247b089d95985493662376622bc8afb1b989f9f4f87c34e38ef17fa5cda5
-
SHA512
ad31b05d851046d93b0e4fc0159c74113bff1698caec7fa79d52198065c1bd5df1d33bc8b313917bb9a7db8184b156c2ad8e2145f997d9505f614191007767cd
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUr:eOl56utgpPF8u/7r
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 2 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-04_1093929d21cf1c8f7448fe71a6913a9c_cobalt-strike_cobaltstrike_poet-rat.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-04_1093929d21cf1c8f7448fe71a6913a9c_cobalt-strike_cobaltstrike_poet-rat.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
3.3MB