xmrig | 52b46084565891486fc95440f7bde3ee9d950e714d3095690738ae0d98b8a109

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
23-12-2024 19:25

Target

JaffaCakes118_52b46084565891486fc95440f7bde3ee9d950e714d3095690738ae0d98b8a109.exe
Size

1.1MB
MD5

44e9113ed32d1f58bd77ae709e71393c
SHA1

074b5a86ebf9b2628efaa1268de568b5412960f8
SHA256

52b46084565891486fc95440f7bde3ee9d950e714d3095690738ae0d98b8a109
SHA512

9d34efc57d5c33139bb3648bdb1fc697c1e3e6aced116acf05e9652b532cebec5823e0a113d9e7091991a1020cfa2c301bc201511e7e817bf98d1ceb8ddf7707
SSDEEP

24576:Uy+jMkaTDtuF6kYK2MS6+wxaD21EtYlsVVRylcOJLrTkHurKgk1:UyFkaTDtuMkxrU3t9icaLMurC

Score

10^/10

xmrig miner upx

Xmrig family
xmrig
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
behavioral1/memory/2536-2-0x0000000000400000-0x0000000000AE9000-memory.dmp	xmrig

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2536-0-0x0000000000400000-0x0000000000AE9000-memory.dmp	upx
behavioral1/memory/2536-2-0x0000000000400000-0x0000000000AE9000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_52b46084565891486fc95440f7bde3ee9d950e714d3095690738ae0d98b8a109.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_52b46084565891486fc95440f7bde3ee9d950e714d3095690738ae0d98b8a109.exe"
1⤵
PID:2536

memory/2536-0-0x0000000000400000-0x0000000000AE9000-memory.dmp

Filesize
6.9MB

Download
memory/2536-1-0x0000000000AF0000-0x0000000000B04000-memory.dmp

Filesize
80KB

Download
memory/2536-2-0x0000000000400000-0x0000000000AE9000-memory.dmp

Filesize
6.9MB

Download