Analysis
-
max time kernel
110s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-11-2024 10:10
General
-
Target
54b0ff694289b98c5478191cf3d448b13addd61c04e6a33ab622b065b3e36ae2.exe
-
Size
1.5MB
-
MD5
0a38ea9d2bf9b14d4c53280251afbfd0
-
SHA1
7003e338e0f79ce2949c629084c215ac5b918ca1
-
SHA256
54b0ff694289b98c5478191cf3d448b13addd61c04e6a33ab622b065b3e36ae2
-
SHA512
5a462c5e0a50d2a10fa1af872c7b4b6c3022bc4b8696d7aba4dbcd9c5b2ae78a55d567bc1edd20255bc30e5584816a1f4fdb0f553b56bbdcd26fc520f5b7ce7a
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlGC78XCej06sSv8rcbQyfUkjPLtiaJ8:knw9oUUEEDlGUrMjAkFi9
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\54b0ff694289b98c5478191cf3d448b13addd61c04e6a33ab622b065b3e36ae2.exe"C:\Users\Admin\AppData\Local\Temp\54b0ff694289b98c5478191cf3d448b13addd61c04e6a33ab622b065b3e36ae2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB