Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
14/07/2026, 04:28
General
- Target 8b3d98bc1ae46b90e081863e131b89e2b457a632c6ce74b95702fb54f6be17b1.exe
- Size 7.3MB
- Sample260714-e336aaes8q
- SHA256 8b3d98bc1ae46b90e081863e131b89e2b457a632c6ce74b95702fb54f6be17b1
Malware Config
Signatures
- Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
- XMRig Miner payload 25 IoCs
- Suspicious behavior: EnumeratesProcesses 18 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b3d98bc1ae46b90e081863e131b89e2b457a632c6ce74b95702fb54f6be17b1.exe"C:\Users\Admin\AppData\Local\Temp\8b3d98bc1ae46b90e081863e131b89e2b457a632c6ce74b95702fb54f6be17b1.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4648-0-0x00007FFEC52F0000-0x00007FFEC5300000-memory.dmp
memory/4648-1-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-12-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-15-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-16-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-20-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-26-0x000002C065E90000-0x000002C065EB0000-memory.dmp
memory/4648-25-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-24-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-27-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-28-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-29-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-32-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-30-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-31-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-23-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-22-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-21-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-19-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-18-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-17-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-14-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-13-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-11-0x00007FFF05280000-0x00007FFF054E3000-memory.dmp
memory/4648-33-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-35-0x000002C065EE0000-0x000002C065F00000-memory.dmp
memory/4648-36-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-37-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-38-0x000002C06B000000-0x000002C06B886000-memory.dmp
memory/4648-40-0x000002C065F00000-0x000002C065F20000-memory.dmp
memory/4648-41-0x000002C065F20000-0x000002C065F40000-memory.dmp
memory/4648-42-0x000002C065F00000-0x000002C065F20000-memory.dmp
memory/4648-43-0x000002C065F20000-0x000002C065F40000-memory.dmp