Analysis

  • max time kernel
    96s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-12-2024 09:19

General

  • Target

    11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe

  • Size

    880KB

  • MD5

    cdb3efbce029471faaa979f37e1a7a02

  • SHA1

    8faef22b85705bc3b6c4773e54e7ac56f46c973e

  • SHA256

    11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5

  • SHA512

    a076722a046373500b8cd488c6cc6d42319212cc5b0d43da5d8dfcd133048abcec40350b648de63adff3e55fbb6b9dd6f0839b5a691abc2a5111b9e18c8c57b6

  • SSDEEP

    24576:0LerFx1xSaA8cL+wC8QW+BLBXnEbPlxRUT/L/b:0gv1xYLlClW+pFnE7lxRUnb

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe
    "C:\Users\Admin\AppData\Local\Temp\11bf295c9de415216fcbd951cce671a1da30380aa27de24b863646cb5e19faf5.exe"
    1⤵
      PID:1124

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1124-0-0x00007FF69E810000-0x00007FF69EAFD000-memory.dmp

      Filesize

      2.9MB

    • memory/1124-1-0x00007FF69E810000-0x00007FF69EAFD000-memory.dmp

      Filesize

      2.9MB