Behavioral task
behavioral1
Sample
MP.TRex.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MP.TRex.dll
Resource
win10v2004-20220812-en
General
-
Target
ad523f3e4663ca6de5a5953d3e9316ed2b59031b5d0aa860f70b81fbec65ba9d
-
Size
8KB
-
MD5
7b250d7b03a3c8f106c6c7b9b07f93d1
-
SHA1
73111cd1876487003e6f46ecbeefda9540ecfcf5
-
SHA256
ad523f3e4663ca6de5a5953d3e9316ed2b59031b5d0aa860f70b81fbec65ba9d
-
SHA512
28cf72a80eb0e58cb560a51946afb47d2be6007b522faf9d90a0f8186acae3c49e4d146e2e88aa4342533c9053a732a9a95a6c7c4fe614a40cf388ead38864c3
-
SSDEEP
192:FQPgvnJA0Jz/Bb6ahGSy5daFUxHIcIVoCg9UK8MI72CV1th:6PmAoz/Bb6ahGz5daFURYokmQ2Cph
Malware Config
Signatures
-
Detectes TRex Payload 2 IoCs
resource yara_rule sample miner_trex static1/unpack001/MP.TRex.dll miner_trex
Files
-
ad523f3e4663ca6de5a5953d3e9316ed2b59031b5d0aa860f70b81fbec65ba9d.zip
-
MP.TRex.dll.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ