Analysis
-
max time kernel
94s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-12-2024 12:03
General
-
Target
2024-12-24_6dc18ccbc4b229e93acf989a01e5c8de_cobalt-strike_cobaltstrike_poet-rat.exe
-
Size
6.0MB
-
MD5
6dc18ccbc4b229e93acf989a01e5c8de
-
SHA1
87fbfdca179fdec3b1573fc7f1232a22a34816b8
-
SHA256
64fcd84e18e44f9b19e63e9115d61a35ab7d7ee964fcc49822da6a0c79f765d1
-
SHA512
abe9b0a295772cf8fffa1397acab5d424725841d67406ad32e994f1bc0f465a62ac59507afd8942b7c8ec23c1f07e725e70c5b534c41584bd988a09da90a2704
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lU7:eOl56utgpPF8u/77
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-24_6dc18ccbc4b229e93acf989a01e5c8de_cobalt-strike_cobaltstrike_poet-rat.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-24_6dc18ccbc4b229e93acf989a01e5c8de_cobalt-strike_cobaltstrike_poet-rat.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB