Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
18-12-2024 06:18
General
-
Target
af8887ea7bfce05ca9b34f02ac6e8c3a4eff3ca84c8783688261c1533ff5fe10.exe
-
Size
1.7MB
-
MD5
447eeb8fb9d1db49e0873b882f2e9786
-
SHA1
7f0272dace12e096a6f49de09a96a7eb05c4350d
-
SHA256
af8887ea7bfce05ca9b34f02ac6e8c3a4eff3ca84c8783688261c1533ff5fe10
-
SHA512
9263484f5afab2497f69dec660a1195031ea3358be58de6a78a1e1cc3e921b4ab0f7ccfef7984831dbda5c1467079347a85e3a967ffba7a0282ae6ee35a3bc2a
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOalBd6LjZr6Nc/X:knw9oUUEEDlGUh+hNAa6NmX
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af8887ea7bfce05ca9b34f02ac6e8c3a4eff3ca84c8783688261c1533ff5fe10.exe"C:\Users\Admin\AppData\Local\Temp\af8887ea7bfce05ca9b34f02ac6e8c3a4eff3ca84c8783688261c1533ff5fe10.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB