Analysis
-
max time kernel
141s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
19-11-2024 12:32
General
-
Target
2024-11-19_9b899873766a77950b077ee62636f4c3_polyvice.exe
-
Size
10.5MB
-
MD5
9b899873766a77950b077ee62636f4c3
-
SHA1
90c0fe129de2d3c5c86c8164fcd7a66d71a14bd9
-
SHA256
d52427c34275299e5ce264fdf5d3df2a812261cd12352276fcb0ccfd7f21265f
-
SHA512
d67a09edba4824c500dfc55c266946171ae495d263660e3e96e36c3f60ef60929b640ed4f7c608286d705b34134c427b70ddeae01e723a6c0c3643b69a65f0bf
-
SSDEEP
196608:7sgJIQolcPYjqkW56sjj29Q6Se8E5Ztsbzy:7ml8LC9DJjXsS
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 14 IoCs
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-19_9b899873766a77950b077ee62636f4c3_polyvice.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-19_9b899873766a77950b077ee62636f4c3_polyvice.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
16KB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB
-
Filesize
11.3MB