Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-11-2024 15:32
General
-
Target
2024-11-17_bd19049d6afc07a4c83ebd60caffaf24_polyvice.exe
-
Size
10.5MB
-
MD5
bd19049d6afc07a4c83ebd60caffaf24
-
SHA1
3b11be78905848f0cb38c74ff57e991e8d07dc1e
-
SHA256
9fec9cee465c4efa097e3add3d501a0aa2eeef86d7307b374b878adc697c3991
-
SHA512
84315d2c02b6c1b45a2a0e2e927cb19f8fcafed438a7fedf9427c734d668580997ca680b79d70b91dbb3e851827ef03ab3d1d56ac5d6cc358675bbcf12877aaa
-
SSDEEP
196608:7sgJIQolcPYjqkW56sjj29Q6Se8ELZtsbdy:7ml8LC9DJ1Xsg
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-17_bd19049d6afc07a4c83ebd60caffaf24_polyvice.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-17_bd19049d6afc07a4c83ebd60caffaf24_polyvice.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
16KB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB