xmrig | fb2152f97a556bd76309161fc9b92e7046ab04290e40223e7f0d890d0ae28e28

Analysis

max time kernel
94s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2024, 13:59

Target
2024-09-19_e2061bdfecbd32c8f5ce98dcedd78fb8_cobalt-strike_cobaltstrike_poet-rat.exe
Size 6.0MB
Sample240919-ragg2asfjk
SHA256 fb2152f97a556bd76309161fc9b92e7046ab04290e40223e7f0d890d0ae28e28
MD5 e2061bdfecbd32c8f5ce98dcedd78fb8
SHA1 886bfe9fca8bb8b6a1b91ad513d9fc7e5a13cfae
SHA512 f38fb7226baf8b77a4c5813169b9a725dc5cf23dfc33e225df1728cea19fd804c13dae1659f644d16646d0e954bd2f6dda75af0ac78f85294defad1ecaf6cb19
SSDEEP 98304:demTLkNdfE0pZ3G56utgpPFotBER/mQ32lUx:E+P56utgpPF8u/7x
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/4676-0-0x00007FF66BFC0000-0x00007FF66C314000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4676-0-0x00007FF66BFC0000-0x00007FF66C314000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-09-19_e2061bdfecbd32c8f5ce98dcedd78fb8_cobalt-strike_cobaltstrike_poet-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2024-09-19_e2061bdfecbd32c8f5ce98dcedd78fb8_cobalt-strike_cobaltstrike_poet-rat.exe"
1⤵
PID:4676