Analysis
-
max time kernel
110s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-02-2025 00:50
General
-
Target
8041130b979b7a6fc5b3426f0de5c14a519ae94efd18f2fcd3e1aec49e4c08e6.exe
-
Size
1.1MB
-
MD5
241d176220ce7b10814d62b77759aad1
-
SHA1
2933a9ed88405e9e084b7098c16e6c5d5c283338
-
SHA256
8041130b979b7a6fc5b3426f0de5c14a519ae94efd18f2fcd3e1aec49e4c08e6
-
SHA512
34d0f1c676063e643206ab5e3d6f19f8d6c5b702289ba6a6a14c536dea89337394769c9fb6fc86452cdd2253fed4f7a09a37e49d32640228c35c1de5cf5e4481
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlgQ5aILMCfmAU7jEvL:knw9oUUEEDld5aIwC+Acc
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8041130b979b7a6fc5b3426f0de5c14a519ae94efd18f2fcd3e1aec49e4c08e6.exe"C:\Users\Admin\AppData\Local\Temp\8041130b979b7a6fc5b3426f0de5c14a519ae94efd18f2fcd3e1aec49e4c08e6.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB