Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
02/10/2024, 22:36
General
-
Target
be726dce2b08af3491a2b67545144538f266dff08c34749c93c3d5a8896c2df7N.exe
-
Size
5.2MB
-
MD5
bcbfe0fdea88e5e391028cf8aa2793f0
-
SHA1
5dfb5b8258fe94cca1188188791cab5bcaa71604
-
SHA256
be726dce2b08af3491a2b67545144538f266dff08c34749c93c3d5a8896c2df7
-
SHA512
b771707af6b24a7d57849c5cc53ba508b64f571856f4de4b1033d7c4c296e1c9cafca610bed7d2e71cedb955e8995a023becba6fbab2bad017635bfb80db2241
-
SSDEEP
49152:ROdWCCi7/ras56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6l7:RWWBibf56utgpPFotBER/mQ32lUn
Score
10/10
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\be726dce2b08af3491a2b67545144538f266dff08c34749c93c3d5a8896c2df7N.exe"C:\Users\Admin\AppData\Local\Temp\be726dce2b08af3491a2b67545144538f266dff08c34749c93c3d5a8896c2df7N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB