Analysis
-
max time kernel
10s -
max time network
2s -
platform
windows11-21h2_x64 -
resource
win11-20250313-en -
resource tags
-
submitted
28/03/2025, 17:36
General
-
Target
xblkpfZ8Y4.exe
-
Size
2.9MB
-
MD5
45fe36d03ea2a066f6dd061c0f11f829
-
SHA1
6e45a340c41c62cd51c5e6f3b024a73c7ac85f88
-
SHA256
832640671878e0d9a061d97288ffaae303ba3b4858ed5d675c2170e7770ec8a6
-
SHA512
c8676bd022fae62a2c03932dd874da8482168698fc99987c8d724b5302f75131839b5b3b6f8288b823c5bb732918f6bc49c377116bb78825807de45b6a10026f
-
SSDEEP
49152:5R+FNlC1gMk0gEB/N86YQNma1e3gQZDCY1EMkTiIpLRYvTaMQRmWWJgNVRuME:56Mga18YgaoQQhMMkvGjocmNVR
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xblkpfZ8Y4.exe"C:\Users\Admin\AppData\Local\Temp\xblkpfZ8Y4.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.3MB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
12.3MB
-
Filesize
12.3MB