xmrig | b02c86d28fbd7d38cd006dd8629274442e5fb97af0f9df3466600f5ed83e8ecc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b02c86d28fbd7d38cd006dd8629274442e5fb97af0f9df3466600f5ed83e8ecc
Size

2.7MB
MD5

d8b9d328009e8ca0b4c9290125238508
SHA1

c5a54907028a78b10e2d0088c9dd6e3583690232
SHA256

b02c86d28fbd7d38cd006dd8629274442e5fb97af0f9df3466600f5ed83e8ecc
SHA512

6cbab2916a32f633b7a41b4ccc663784ce79d34db1dbcc1956e67795fb238e52dfda1b0375fcf06f5dd4fe1c20214d8937a81ae4020f3f49a860f05c647390a7
SSDEEP

49152:uAq2XxFzk4WDDss5zERRbJ9laBj1TO7v6T3mldBNkuALL2jB962f/o:hq2fEss5z7RTOFkuA/WEM

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Files

b02c86d28fbd7d38cd006dd8629274442e5fb97af0f9df3466600f5ed83e8ecc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE