Analysis
- max time kernel
899s - max time network
887s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
29/04/2026, 12:10
General
- Target xmrig.exe
- Size 6.2MB
- Sample260429-pcafdsbt6w
- SHA256 6fa80698d7268f6e88aa88c06fb27ee99e1bcee747c2e76911e6206a5b1aeeb3
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\xmrig.exe -o xmrpool.eu:3333 -u 498LkYVD46UDjJMZzvkiGpcgZwC7judEEZtnBGKQKM7nABnRnwqdxj4YYferd8BmJb4SbtePTsYyR35Kyu2xH4j93b5ZPTo -p x1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\xmrig.exeC:\Users\Admin\AppData\Local\Temp\xmrig.exe -o xmrpool.eu:3333 -u 498LkYVD46UDjJMZzvkiGpcgZwC7judEEZtnBGKQKM7nABnRnwqdxj4YYferd8BmJb4SbtePTsYyR35Kyu2xH4j93b5ZPTo -p x2⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2152-0-0x0000019340BC0000-0x0000019340BE0000-memory.dmp
memory/2152-1-0x0000019340C00000-0x0000019340C20000-memory.dmp
memory/2152-2-0x0000019340CE0000-0x0000019340DCA000-memory.dmp
memory/2152-4-0x0000019340C20000-0x0000019340C40000-memory.dmp
memory/2152-5-0x0000019340C40000-0x0000019340C60000-memory.dmp
memory/2152-7-0x0000019340C20000-0x0000019340C40000-memory.dmp
memory/2152-8-0x0000019340C40000-0x0000019340C60000-memory.dmp