Analysis
-
max time kernel
105s -
max time network
116s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
07/09/2024, 06:54
General
-
Target
0d8c7e8a72fa3fb4e5d8764161378530N.exe
-
Size
5.9MB
-
MD5
0d8c7e8a72fa3fb4e5d8764161378530
-
SHA1
2b8a8623968741cb275ec9e463b83472a9719f18
-
SHA256
df7d0e873a50cc4dbf00154f7575060d27c0f08b9620f18a8665e2cb26a4cb4b
-
SHA512
31f1b539c521b0fda801ecd1b831d8d7b568ab9f8d77167da85ab56f60c6819123a4a767486109255eccbca6990ebc290a9fb8dd83bf9be23bc1c93ae6b9a1cc
-
SSDEEP
98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUl:T+q56utgpPF8u/7l
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d8c7e8a72fa3fb4e5d8764161378530N.exe"C:\Users\Admin\AppData\Local\Temp\0d8c7e8a72fa3fb4e5d8764161378530N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB