xmrig | ad02450609a5b60d863124b99f4c77a8bc00fc109921add4c91d43b7cb799f81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad02450609a5b60d863124b99f4c77a8bc00fc109921add4c91d43b7cb799f81
Size

2.7MB
MD5

0f2622ce1bad772239d0e35e132d7264
SHA1

5d4fd66f5fbd28c32cb054594d13e05b9c173b5b
SHA256

ad02450609a5b60d863124b99f4c77a8bc00fc109921add4c91d43b7cb799f81
SHA512

d767ead8c040639442c7e9605559049970dfc3127c6a2439be44ade4eb72678216d80ba20a76a74bc1fd27136a7cf9cf334505aa2d5c99ba559926e5352b7144
SSDEEP

49152:uAq2XxFzk4WDDss5zERRbJ9laBj1TO7v6T3mldBNkuALL2jB962f/o:hq2fEss5z7RTOFkuA/WEM

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Files

ad02450609a5b60d863124b99f4c77a8bc00fc109921add4c91d43b7cb799f81
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE