Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
31-01-2025 05:56
General
-
Target
2025-01-31_be8b1fdc420cc19262c6ac4dcba42eed_polyvice.exe
-
Size
10.5MB
-
MD5
be8b1fdc420cc19262c6ac4dcba42eed
-
SHA1
0e47723e1c5ad794328a53dcf5d6dd3a96b1c10f
-
SHA256
3e90e1fd54fa90baaaa0ca56a9e21863afa5c19e5723e5b7f6466be99a7ffca1
-
SHA512
3f601977022befd699a0b033d7c5084ab3e9f23218a974d99a479b6ce7c9bc154287ef42e760ed2fff2c0fbfc017d648a1b959e008ff3b6616d7de18b2607111
-
SSDEEP
196608:xVO70Wv7L2L/7YGO0upslXDFHffPZ5h+uqL:xILcsk5HnR7qL
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-31_be8b1fdc420cc19262c6ac4dcba42eed_polyvice.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-31_be8b1fdc420cc19262c6ac4dcba42eed_polyvice.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
16KB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB
-
Filesize
11.2MB