Analysis
-
max time kernel
113s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
02/02/2025, 16:25
General
-
Target
fb1a1c3f88f78c2954efb5a663560b5a3caa2f457e001bfa5110497ddab7f0a2.exe
-
Size
1.2MB
-
MD5
4c46e71a72a714d08e89f1dcfeb5811e
-
SHA1
770562cfb85720f5cc1c65f9eed332249ba45ef7
-
SHA256
fb1a1c3f88f78c2954efb5a663560b5a3caa2f457e001bfa5110497ddab7f0a2
-
SHA512
c11e38256bb1df0d604e3392eb225d4d792ec747138d5eb4cf23efda2ddfd978996ed9a7b7501fbe090aec04a3aa42369a432faafca9453d77a2d3f76a18e3c0
-
SSDEEP
24576:JanwhSe11QSONCpGJCjETPlOqzJO0RD/J54y9K6WdWLLH:knw9oUUEEDlOuJnRRoS
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 12 IoCs
-
UPX packed file 13 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb1a1c3f88f78c2954efb5a663560b5a3caa2f457e001bfa5110497ddab7f0a2.exe"C:\Users\Admin\AppData\Local\Temp\fb1a1c3f88f78c2954efb5a663560b5a3caa2f457e001bfa5110497ddab7f0a2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB