Analysis
-
max time kernel
111s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-01-2025 07:36
General
-
Target
37ef979d264fe7e283da3745518ffc7ae180c1b7317f0747ad5b3d73b5c687d1.exe
-
Size
1013KB
-
MD5
c354e540466a76f2cf5474cbe7ef80ef
-
SHA1
a437d258fa44c45b1a1c9c975dee58c02a2f07a4
-
SHA256
37ef979d264fe7e283da3745518ffc7ae180c1b7317f0747ad5b3d73b5c687d1
-
SHA512
de83baffca3d25cbc732f08dec7af020050e40c50d04f7550e2c01e0529f14b1fe53a6c1c28ec3c01284e98f64f0060bc66a9ebe906d04bd205e5b6f6b81c942
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS5bcsf7r9KS:knw9oUUEEDl+xTMST/
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\37ef979d264fe7e283da3745518ffc7ae180c1b7317f0747ad5b3d73b5c687d1.exe"C:\Users\Admin\AppData\Local\Temp\37ef979d264fe7e283da3745518ffc7ae180c1b7317f0747ad5b3d73b5c687d1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB