Analysis
-
max time kernel
120s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-11-2024 19:59
General
-
Target
353320e763945d79bc9350cca4782c34caf94044a0562c9962b594de56939e85N.exe
-
Size
1.7MB
-
MD5
d9baf6b91f6e15e3c1c01714e6b7f31b
-
SHA1
ae78da85c8e4c73bd41eef123343c0491f32e6a5
-
SHA256
c9a5ea98d3c854d143abcef686b8787b7d299ccb65ee189d8fb4c36a0f052c4c
-
SHA512
80014b064048e5c29fa363f98664c19c3ea823b59e720b8f3f28637501f87988246178d0dbaaa5a9b90cf4b3dddfd3554b026b5abb333f288213cb97bb7fb824
-
SSDEEP
24576:RVIl/WDGCi7/qkat62wT83PzKeLukbyUVWCPSuwNYWPxvyuEtrE60lmNgmlpF7cN:ROdWCCi7/ra+GJLuIaRNGQ3a/6zz
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 14 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\353320e763945d79bc9350cca4782c34caf94044a0562c9962b594de56939e85N.exe"C:\Users\Admin\AppData\Local\Temp\353320e763945d79bc9350cca4782c34caf94044a0562c9962b594de56939e85N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB