Family: xmrig

XMRig is a high performance, open source, cross platform CPU/GPU miner.

XMRig Miner payload

Badlisted process makes network request

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: PowerShell

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

Command and Scripting Interpreter: PowerShell

Run Powershell and hide display window.

Modifies Windows Firewall