Overview

overview

10

Static

static

10

DOC001.exe

windows7-x64

8

DOC001.exe

windows10-2004-x64

8

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$R9/NsCpuC...32.exe

windows7-x64

10

$R9/NsCpuC...32.exe

windows10-2004-x64

10

$R9/NsCpuC...64.exe

windows7-x64

10

$R9/NsCpuC...64.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2024 18:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $R9/NsCpuCNMiner64.exe

  • Size

    943KB

  • MD5

    3587409a3bbf53be5808dd5fccdbabe1

  • SHA1

    eec6816b6f8ec3bdeb21f9c026cdc0ae1b8370fb

  • SHA256

    90b56ccc13934418ebc8a51cbedccbafe27d877c6080023afbb42092d7fdcf72

  • SHA512

    2cbd9a85407809a0c29497d50c22fba98f0ca8ec71b1f3b7abdec233bcb9e3173f2487adbebdb65b1055ebd4aee756033eb4da435649e1392bf164e77fd0e188

  • SSDEEP

    24576:Arz0MBk33rNDK5YO5WiI3zB4AFxm7pN6bHkfLa3in:AUMBk33rNDK5YO5Wi8qAFxmpN6bp

Score
10/10
xmrigminer

Malware Config

Signatures

  • Xmrig family
    xmrig
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner payload 1 IoCs
    miner

Processes

  • C:\Users\Admin\AppData\Local\Temp\$R9\NsCpuCNMiner64.exe
    "C:\Users\Admin\AppData\Local\Temp\$R9\NsCpuCNMiner64.exe"
    1⤵
      PID:2212

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2212-0-0x0000000000400000-0x00000000004F5000-memory.dmp

      Filesize

      980KB

      Download