Behavioral task
behavioral1
Sample
6b0a15271826215dfcda4ce447ea16c6e239abb1525f71b1d9a4a76a63873320.exe
Resource
win7-20220901-en
General
-
Target
6b0a15271826215dfcda4ce447ea16c6e239abb1525f71b1d9a4a76a63873320
-
Size
1.1MB
-
MD5
f7e4adf96cd8a8557fbfd862cc4bfc0f
-
SHA1
610dd0ff6a123eaa4a013bf9804e6e5f4e7456db
-
SHA256
6a430c9eb7045926885bd4dbae3aabe95dd2b133a30851d5e67bff2f7dcf7e85
-
SHA512
0a564351d7214934c4a15b3836b0b2f1248e4f1308b1ce05a1f49a02464c538ce0eba6a5b0042b4dd28d87fc5591157f89333adbf793d7eae4a2dcfcda2c4272
-
SSDEEP
24576:PSxFJOADmg0imJiZs4gn9Xz9l6FyWlwzi1CQdwEEuQavq5PQtkI:PSZD0i3KpV9l6nui3KMCiWI
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule static1/unpack002/out.upx xmrig -
Xmrig family
-
resource yara_rule static1/unpack001/6b0a15271826215dfcda4ce447ea16c6e239abb1525f71b1d9a4a76a63873320 upx
Files
-
6b0a15271826215dfcda4ce447ea16c6e239abb1525f71b1d9a4a76a63873320.zip
-
6b0a15271826215dfcda4ce447ea16c6e239abb1525f71b1d9a4a76a63873320.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 5.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE