Behavioral task
behavioral1
Sample
MP.WildRig.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MP.WildRig.dll
Resource
win10v2004-20220901-en
General
-
Target
ab982407d4ea62c8850481425815008333c2203a4500e9749fc8f05b140680b2
-
Size
8KB
-
MD5
30a4e1d4019c43569c31f95cd4a290b4
-
SHA1
da355679e583377df945cac1a0a22a81da1a97a3
-
SHA256
ab982407d4ea62c8850481425815008333c2203a4500e9749fc8f05b140680b2
-
SHA512
e8b0bd7cc5ee35fd0b8b2a9a780596b7d8215ebd9fd96d0a4f707030218892e503f609024364205a409704524a6e2eef78dcda94ccc9975b26bd33943934b396
-
SSDEEP
192:JSiPaM713R6mlyv0ZPMCds87mAdsBD/Eq3WTAgzM:JSiPncm4v0Z1i87mAbAgzM
Malware Config
Signatures
-
Detectes WildRig Payload 2 IoCs
resource yara_rule sample miner_wildrig static1/unpack001/MP.WildRig.dll miner_wildrig
Files
-
ab982407d4ea62c8850481425815008333c2203a4500e9749fc8f05b140680b2.zip
-
MP.WildRig.dll.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ