Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/09/2024, 07:36
Behavioral task
behavioral1
Sample
757c7fd8bb5d44ff6fdcf4c365ea4350N.exe
Resource
win7-20240903-en
4 signatures
120 seconds
General
-
Target
757c7fd8bb5d44ff6fdcf4c365ea4350N.exe
-
Size
5.9MB
-
MD5
757c7fd8bb5d44ff6fdcf4c365ea4350
-
SHA1
de6108e5e96ae210ef1cdd6734feb070094611bc
-
SHA256
8bd0f4662e9845716b501f160e3f83ed3920f81e335fc3cc6e83113f0edbcf8a
-
SHA512
29eb29183c8a845d72221df4b0f2055b4582172e8f9f7b89b60c2b8f4905b898630d124e5c0f334e56ca59d83bac68b26fe5124e8a3484af77b821cb49bea8e9
-
SSDEEP
98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUg:T+q56utgpPF8u/7g
Malware Config
Signatures
-
XMRig Miner payload 2 IoCs
resource yara_rule behavioral1/memory/2076-0-0x000000013FE70000-0x00000001401C4000-memory.dmp xmrig behavioral1/memory/2076-2-0x000000013FE70000-0x00000001401C4000-memory.dmp xmrig -
resource yara_rule behavioral1/memory/2076-0-0x000000013FE70000-0x00000001401C4000-memory.dmp upx behavioral1/memory/2076-2-0x000000013FE70000-0x00000001401C4000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeLockMemoryPrivilege 2076 757c7fd8bb5d44ff6fdcf4c365ea4350N.exe Token: SeLockMemoryPrivilege 2076 757c7fd8bb5d44ff6fdcf4c365ea4350N.exe