Analysis
-
max time kernel
140s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-11-2024 14:34
General
-
Target
2024-11-17_c92d935b8cb8d1e210123a37531731dc_polyvice.exe
-
Size
10.4MB
-
MD5
c92d935b8cb8d1e210123a37531731dc
-
SHA1
b297c042e3d9c1b3954b16238149613e353d5dc8
-
SHA256
a489c70d658a05c211f0ce0ed65e238fd2ed367237758cf5a75867c57360cd35
-
SHA512
85f092338f477fe107135f94fb8946e270c448ea6a65cd7671d876a14499cf31044cf56eba7ed99a91e96fb66b83364fa9fcc7c5dfff48ef8ce18e826834e9d2
-
SSDEEP
196608:LdbomXW7NnNTy6BW+Fs4qkOn4LpSTI8hva5:LANh1qnOuIoQ
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-17_c92d935b8cb8d1e210123a37531731dc_polyvice.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-17_c92d935b8cb8d1e210123a37531731dc_polyvice.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
16KB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB