xmrig | 11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-12-2024 09:19

Target

11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe
Size

880KB
MD5

cdb3efbce029471faaa979f37e1a7a02
SHA1

8faef22b85705bc3b6c4773e54e7ac56f46c973e
SHA256

11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5
SHA512

a076722a046373500b8cd488c6cc6d42319212cc5b0d43da5d8dfcd133048abcec40350b648de63adff3e55fbb6b9dd6f0839b5a691abc2a5111b9e18c8c57b6
SSDEEP

24576:0LerFx1xSaA8cL+wC8QW+BLBXnEbPlxRUT/L/b:0gv1xYLlClW+pFnE7lxRUnb

Score

10^/10

xmrig miner upx

Xmrig family
xmrig
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral1/memory/1972-2-0x000000013FE70000-0x000000014015D000-memory.dmp	xmrig

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1972-0-0x000000013FE70000-0x000000014015D000-memory.dmp	upx
behavioral1/memory/1972-2-0x000000013FE70000-0x000000014015D000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe
"C:\Users\Admin\AppData\Local\Temp\11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe"
1⤵
PID:1972

memory/1972-0-0x000000013FE70000-0x000000014015D000-memory.dmp

Filesize
2.9MB

Download
memory/1972-2-0x000000013FE70000-0x000000014015D000-memory.dmp

Filesize
2.9MB

Download