Analysis
-
max time kernel
110s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-11-2024 15:21
General
-
Target
2fea9e5cebbd88155175b14b83cc4a19c28a4a7bf73e2203832dd993b8a25a4f.exe
-
Size
1.4MB
-
MD5
28ff9380e74d51d2d56f4ef036b4289c
-
SHA1
42f7b27bea5fb74a60682ec281ae508eb781de69
-
SHA256
2fea9e5cebbd88155175b14b83cc4a19c28a4a7bf73e2203832dd993b8a25a4f
-
SHA512
783b99ca12de7db110a70db591a71c52371a3848eaf26977645c322ec316678ff7da6d0f9c466986a31923937fbc5e1c94ac7cfc509b6c4f372e3e9d4ecfa846
-
SSDEEP
24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7NjVb65GsL9QsdkutxbVUDk+3HuP7tH:ROdWCCi7/raWMmSdbbUGsVOutxLtevAL
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2fea9e5cebbd88155175b14b83cc4a19c28a4a7bf73e2203832dd993b8a25a4f.exe"C:\Users\Admin\AppData\Local\Temp\2fea9e5cebbd88155175b14b83cc4a19c28a4a7bf73e2203832dd993b8a25a4f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB