Analysis
-
max time kernel
111s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20-01-2025 09:22
General
-
Target
6cb64d77c9769041524e0d3fed85a45d172fb6354238d5643d3ddbf8eb2fb3eb.exe
-
Size
1.5MB
-
MD5
98a2a6418fd886a813d8f799c74d57c0
-
SHA1
7282a842491727f40aca3d9ce301b768e3342e8a
-
SHA256
6cb64d77c9769041524e0d3fed85a45d172fb6354238d5643d3ddbf8eb2fb3eb
-
SHA512
44782f61fb21d428222f5f8d52013b701f989ed43e1982a84f65eb2fd324a1a180a37ce1711882e65d3f42411b2e218df05b39a6991d54cacdc9a90dda5eb6c7
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3QE:knw9oUUEEDlGUJ8Y9c87Med
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6cb64d77c9769041524e0d3fed85a45d172fb6354238d5643d3ddbf8eb2fb3eb.exe"C:\Users\Admin\AppData\Local\Temp\6cb64d77c9769041524e0d3fed85a45d172fb6354238d5643d3ddbf8eb2fb3eb.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB