Behavioral task
behavioral1
Sample
7692b5392fba164de3954137ff95f744cfcb6b38f0813422f63b06e113d564eb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7692b5392fba164de3954137ff95f744cfcb6b38f0813422f63b06e113d564eb.dll
Resource
win10v2004-20220812-en
General
-
Target
7692b5392fba164de3954137ff95f744cfcb6b38f0813422f63b06e113d564eb
-
Size
18KB
-
MD5
16ab8e8b08c15bb85915d4653a4df2de
-
SHA1
e78fa29628cd512cd79b31d8196f6d441ee38b1d
-
SHA256
7692b5392fba164de3954137ff95f744cfcb6b38f0813422f63b06e113d564eb
-
SHA512
537ead35d1d2d46c3d5b4aeff49de4ad02e326e7196afd43ff6141a5d5360c384a125cd9b96854b38d70808668dbdddf8659dbd6d1c508cfbe7230b5f8d56a61
-
SSDEEP
384:QZ0T/dA5NOLtz9nvh8qSeHS9XD83nTtcPtaBOv36uECD8vixtoG5Phi:QGT/dA5AZzth8FvOTCOOf6u/j
Malware Config
Signatures
-
Detectes WildRig Payload 1 IoCs
resource yara_rule sample miner_wildrig
Files
-
7692b5392fba164de3954137ff95f744cfcb6b38f0813422f63b06e113d564eb.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ