Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
22-12-2024 09:47
General
-
Target
578bfc54c82347dd32f1f5ab785747069cb32e72df8c2c498391bd8a4ca0bb0c.exe
-
Size
1.6MB
-
MD5
b87b4b9797943ec7573b4ef2397c313d
-
SHA1
251be7e56ae6d4c336f75bd9a3920bf988e10f8e
-
SHA256
578bfc54c82347dd32f1f5ab785747069cb32e72df8c2c498391bd8a4ca0bb0c
-
SHA512
7c1b7eef2d6b3f3266a7ecfea9203ee72b97cd74700b0a17d9b34b753b42d610ddeec036fc79e753faedfbf71263b9ec9b32ce2dd9be903dda291ca1f3c18706
-
SSDEEP
24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaF2UdJwUkw3jv0FXbzQppj+r+BgiK:ROdWCCi7/rahOY2UrwUveeFifE83
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\578bfc54c82347dd32f1f5ab785747069cb32e72df8c2c498391bd8a4ca0bb0c.exe"C:\Users\Admin\AppData\Local\Temp\578bfc54c82347dd32f1f5ab785747069cb32e72df8c2c498391bd8a4ca0bb0c.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
3.3MB