xmrig | ab4c878aaab15b8c840a9d1487808a2adf5ec810fbca38ae831404c7450dec56

Analysis

max time kernel
134s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
31/10/2024, 03:03

Target
2024-10-31_46627fc18072001af18f03e5ce3734a0_cobalt-strike_cobaltstrike_poet-rat.exe
Size 6.1MB
Sample241031-dkfftswrhw
SHA256 ab4c878aaab15b8c840a9d1487808a2adf5ec810fbca38ae831404c7450dec56
MD5 46627fc18072001af18f03e5ce3734a0
SHA1 5c9ca050088414ef29e18b3072d6611875f32120
SHA512 8a31ae9a60e776ed7bac0e08f5c0ac732c54a46cae88afc8c0ba7cf58acb86265388024e40020b8326e4931e8e05e87920469e4464e6ec797c2120aa3e8cb8ee
SSDEEP 98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lU9:eOl56utgpPF8u/79
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner upx

Xmrig family
xmrig
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral2/memory/2688-0-0x00007FF72EC50000-0x00007FF72EFA4000-memory.dmp	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2688-0-0x00007FF72EC50000-0x00007FF72EFA4000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-10-31_46627fc18072001af18f03e5ce3734a0_cobalt-strike_cobaltstrike_poet-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2024-10-31_46627fc18072001af18f03e5ce3734a0_cobalt-strike_cobaltstrike_poet-rat.exe"
1⤵
PID:2688