Analysis
-
max time kernel
117s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-11-2024 19:12
General
-
Target
e5870d19bd8363f8ca77c57307a81ddce6aa7cf7b11f9af7e5530e550f2a7e04N.exe
-
Size
5.2MB
-
MD5
f57f078ca8d557270a47ee66af06a760
-
SHA1
93320b269f9bf70ec27cc9e8c6289576e2ff8bc3
-
SHA256
e5870d19bd8363f8ca77c57307a81ddce6aa7cf7b11f9af7e5530e550f2a7e04
-
SHA512
24104080ce21cdb153822135e4ed8a4a9149e18cbdaab684ac034d50995fa4c710b95aae842d8523712d040fc736e38f926059d64a31b3589357ee43c6cfe380
-
SSDEEP
49152:ROdWCCi7/ras56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6lK:RWWBibf56utgpPFotBER/mQ32lUe
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e5870d19bd8363f8ca77c57307a81ddce6aa7cf7b11f9af7e5530e550f2a7e04N.exe"C:\Users\Admin\AppData\Local\Temp\e5870d19bd8363f8ca77c57307a81ddce6aa7cf7b11f9af7e5530e550f2a7e04N.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB