Analysis
-
max time kernel
91s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 22:40
General
-
Target
$R9/NsCpuCNMiner32.exe
-
Size
1.5MB
-
MD5
30843cdd1e1eb312d1cce94c3c826c88
-
SHA1
10f885f7595de28f5b8a6ca5c5b852edc8fd3238
-
SHA256
6eaebe0831a31d42003811927284cbce49c0fa10d177f28d139f3f64369c2327
-
SHA512
3e9fdb0b6a5b9f7a4dd071530677721571c658b059a0a2f8611e5db1c1d208d9aa7889f7ff0c2878a9bf3e95bbcd21435f38c5721eb2a9eac500cd108f2c2be2
-
SSDEEP
24576:mWxPgN3IsM9D6tVBml1+mXRRVJ9l7lDb65rIuBX/TpuRHZyfsihmcifeuQ4:mWxo3IlD+el1+0RRVJ9l7mkuBXr8R566
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\$R9\NsCpuCNMiner32.exe"C:\Users\Admin\AppData\Local\Temp\$R9\NsCpuCNMiner32.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB