Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2024 07:16

General

  • Target

    0274948427d372978530ac25d78830d51aba85b95685410a80fcb5f871856c52N.exe

  • Size

    880KB

  • MD5

    1cee17ce88862f546ac70f5d582e9f30

  • SHA1

    502f3b3d9e6266b87d11ab001ee4bb114162508c

  • SHA256

    0274948427d372978530ac25d78830d51aba85b95685410a80fcb5f871856c52

  • SHA512

    ddf6597141f4fe90f65ae9811e3f910d627a1f6be6d2aca637e8bf03f3188ece182e0d35392d47f58b508426034874850f75f524a65dbddc648c63d3a20133e4

  • SSDEEP

    24576:0LerFx1xSaA8cL+wC8QW+BLBXnEbPlxRUT/L/:0gv1xYLlClW+pFnE7lxRUn

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0274948427d372978530ac25d78830d51aba85b95685410a80fcb5f871856c52N.exe
    "C:\Users\Admin\AppData\Local\Temp\0274948427d372978530ac25d78830d51aba85b95685410a80fcb5f871856c52N.exe"
    1⤵
      PID:2756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2756-0-0x000000013F520000-0x000000013F80D000-memory.dmp

      Filesize

      2.9MB

    • memory/2756-2-0x000000013F520000-0x000000013F80D000-memory.dmp

      Filesize

      2.9MB