loaderbot | f69025c3989bcf53faa23fb240fc6710ab36ed36c13b5c2fa78c8725772dbe4f | Triage

Sharing

General

Target

f69025c3989bcf53faa23fb240fc6710ab36ed36c13b5c2fa78c8725772dbe4f
Size

1.1MB
MD5

35b94119f76089e8937496e6942fb9dd
SHA1

8cc1318e56d7f57ac2c1f62ebfffdd2ad68c4d7c
SHA256

f69025c3989bcf53faa23fb240fc6710ab36ed36c13b5c2fa78c8725772dbe4f
SHA512

d899970fbb9dc843def051d03830cc76a27b9ea4fab9b4785eba901a45d85d1db91cfa2d7f2e7458a1353636a98d012842e831f34e6b2c7fc69e43d0db150348
SSDEEP

24576:obx7BAy6HWDVXL2dqzdasluCO5iiZmD5CdA:obJBAy6HWDVJdasYCO5iiZf

Score

10^/10

miner loaderbot xmrig

Malware Config

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

XMRig Miner Payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Files

f69025c3989bcf53faa23fb240fc6710ab36ed36c13b5c2fa78c8725772dbe4f
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ