Analysis
-
max time kernel
111s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-12-2024 23:05
General
-
Target
edf66735250f0b7d898d275fe69f2b5303bb44574c5d282e8e94584bcdfe59a6.exe
-
Size
5.2MB
-
MD5
6ce58a7c1d166d7a899f194a7c46eb24
-
SHA1
f84fcbbba62ef89f25df595111e2d3ad38b9bc62
-
SHA256
edf66735250f0b7d898d275fe69f2b5303bb44574c5d282e8e94584bcdfe59a6
-
SHA512
25bbf34432eed2adb0e7e6e6693ae7228c214b3609a68168801e94516ab9df70c9009347585f0c6961d297e3df344966867bf62cdb8f803042a65f6883d7e2f3
-
SSDEEP
49152:ROdWCCi7/raN56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6l1:RWWBib+56utgpPFotBER/mQ32lUB
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\edf66735250f0b7d898d275fe69f2b5303bb44574c5d282e8e94584bcdfe59a6.exe"C:\Users\Admin\AppData\Local\Temp\edf66735250f0b7d898d275fe69f2b5303bb44574c5d282e8e94584bcdfe59a6.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB