xmrig | ac1aa4cc12b4fafb7d3b27cbde0457fb79b528e81a06407087ed1e83a1aceff0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac1aa4cc12b4fafb7d3b27cbde0457fb79b528e81a06407087ed1e83a1aceff0
Size

3.5MB
MD5

4fba75ae2819194c3543cad833c435cb
SHA1

41603e131daa0fd3df60f483788efa5eccdb3d35
SHA256

ac1aa4cc12b4fafb7d3b27cbde0457fb79b528e81a06407087ed1e83a1aceff0
SHA512

53be727575fe5d90f315b7a6542d1b9049b29364e30be7691e7c64d0563a49a46b7cc767c3a06df16f7180cba277c4ad5609fcdfa8151773acd4c6103a26115b
SSDEEP

98304:31ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrSQ:3bBeSFk8

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Files

ac1aa4cc12b4fafb7d3b27cbde0457fb79b528e81a06407087ed1e83a1aceff0
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ