Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-09-2024 09:56
General
-
Target
07c20d6fdfc7a8f8ad4872fe94cfaf88437f27fb9e75a0558cae3f9d06f103e2N.exe
-
Size
5.2MB
-
MD5
c4b3d122f22f5eba0543cf50ea5838b0
-
SHA1
2bef6f6efb93a2f861f33162e7d4220a9870522c
-
SHA256
07c20d6fdfc7a8f8ad4872fe94cfaf88437f27fb9e75a0558cae3f9d06f103e2
-
SHA512
b1ba0ef78105a3a1f5d06ca4e0749a0dd5b790a93864dd0699964800d325a83499b530d8328e32b1c1ab7fabb9e736e683fea574afe17c81bad34288fb1c4b5a
-
SSDEEP
49152:ROdWCCi7/raA56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6lx:RWWBibj56utgpPFotBER/mQ32lUl
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\07c20d6fdfc7a8f8ad4872fe94cfaf88437f27fb9e75a0558cae3f9d06f103e2N.exe"C:\Users\Admin\AppData\Local\Temp\07c20d6fdfc7a8f8ad4872fe94cfaf88437f27fb9e75a0558cae3f9d06f103e2N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB