Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25-01-2025 17:48
General
-
Target
86ad97b24376434b058a85b16f12d7e8129342827e002258812bbab47ca100fc.exe
-
Size
1.5MB
-
MD5
721303235392732104aea59e44cd82b3
-
SHA1
1d48b04f2ac54922f823d007fa30848d06f9bc71
-
SHA256
86ad97b24376434b058a85b16f12d7e8129342827e002258812bbab47ca100fc
-
SHA512
59f65d49ecf776b58d28a5c3c896472be2bda8133cba01c0dce346791f1412bf97ccfeba2ccb1692192e38a668b1091882d9503b0414058a659df5d820090afe
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNgoZ1ssoPi7m3QNpUTpa:knw9oUUEEDl37jcquVoVJjDNOmAN3
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\86ad97b24376434b058a85b16f12d7e8129342827e002258812bbab47ca100fc.exe"C:\Users\Admin\AppData\Local\Temp\86ad97b24376434b058a85b16f12d7e8129342827e002258812bbab47ca100fc.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB