Behavioral task
behavioral1
Sample
1900-138-0x0000000000400000-0x000000000040A000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1900-138-0x0000000000400000-0x000000000040A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1900-138-0x0000000000400000-0x000000000040A000-memory.dmp
-
Size
40KB
-
MD5
c7a0e2eb1aa28187eb29f764872d8d98
-
SHA1
c29bb86919d071f2323e16e48b31bb770855b4dd
-
SHA256
b6787f889b96ee14e9cdb557e6dd2280f9ac9880d44bae76ef0c6bb15147352b
-
SHA512
897876adc59d72f3f136428bed0bdd7fa9751c20f9982b6bafe9171e2434d19460e18f56d679dd35cda7d40c10e5f914a54a1424e2e1efc5814e913b63f8cd61
-
SSDEEP
384:banNzogyLQn4KBWNM2M0Iyd8g3riKmbMXypewUTQbmYtG+C:EZEpob1zE
Malware Config
Extracted
eternity
4BCCzZcSyS7L1229mxLRArhp2HPKwpBmHGDnZKnWFds856vvQcRiDSsLZWH2CjW6xigC3NSGE5Qq2gfixNyMMVc723mjiPs
-
payload_urls
http://193.218.201.246/xmrig.exe
Signatures
-
Eternity family
Files
-
1900-138-0x0000000000400000-0x000000000040A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ