Analysis
-
max time kernel
110s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-11-2024 18:13
General
-
Target
07d0da29b8b00c6b8121a0655f68842e8fbfdbfe5662dccd80f2a0d9f2cbeb61.exe
-
Size
1.2MB
-
MD5
bfdac00df2ddaffceb60a2dbca8f72aa
-
SHA1
596e78f2f98434a1caa9c17acb4c138136cff918
-
SHA256
07d0da29b8b00c6b8121a0655f68842e8fbfdbfe5662dccd80f2a0d9f2cbeb61
-
SHA512
9885612546ef017449511ff1ffbd22406cfc59e39fcf4c046d69dc25d542201f1f09d26b56613a26480b254697664ab00284ae683c56b5c8cadaeca072246a93
-
SSDEEP
24576:RVIl/WDGCi7/qkat6Q5aILMCfmARMeXHZalNvyOkQyhOmUci:ROdWCCi7/raZ5aIwC+Aj4kAzR
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\07d0da29b8b00c6b8121a0655f68842e8fbfdbfe5662dccd80f2a0d9f2cbeb61.exe"C:\Users\Admin\AppData\Local\Temp\07d0da29b8b00c6b8121a0655f68842e8fbfdbfe5662dccd80f2a0d9f2cbeb61.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB