Analysis

  • max time kernel
    83s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-12-2024 04:58

General

  • Target

    0309f1ba947da72cf2eaebff979720ccd0886743f8bd69daf4f16f3adcce39f3N.exe

  • Size

    610KB

  • MD5

    0f4479489a09b0ac27f1da08f71fcf10

  • SHA1

    38df246cf4f583791290d1ec1ccaa532a4a75b0a

  • SHA256

    0309f1ba947da72cf2eaebff979720ccd0886743f8bd69daf4f16f3adcce39f3

  • SHA512

    1a5947e9586b8e2d64f9d7551b2b1804f02d3f51cdb56b7b4b2c6d24814799699dc5422102d752d746d1455a745d85f93ee71442740352761eab4003642d6ea4

  • SSDEEP

    12288:yjJbybXGyFh7zaZ4jlfQua2O27IvdZ5vfvr/lZdG/5EFfqLzjya3ONB:yjJbd47zaZEXaa7Gr5Hvr9vGO8/j4

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0309f1ba947da72cf2eaebff979720ccd0886743f8bd69daf4f16f3adcce39f3N.exe
    "C:\Users\Admin\AppData\Local\Temp\0309f1ba947da72cf2eaebff979720ccd0886743f8bd69daf4f16f3adcce39f3N.exe"
    1⤵
      PID:2332

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2332-0-0x000000013F1A0000-0x000000013F31C000-memory.dmp

      Filesize

      1.5MB

    • memory/2332-1-0x000000013F1A0000-0x000000013F31C000-memory.dmp

      Filesize

      1.5MB