General

  • Target

    3684-3150-0x0000000000400000-0x000000000040A000-memory.dmp

  • Size

    40KB

  • MD5

    28e2a2fd0e39c197d83c179959e24b26

  • SHA1

    9c78e3384a2a2cd7b2f1ae65e1e759b06cbd65be

  • SHA256

    e634dbce0f990271c7fd277ed56a65d1257a0b593edfa1226d14769cd9e76708

  • SHA512

    7a41e520a3f6e6bccf22d5e4c5a2c394f2a74dd508bfae42176206457da717d728888c8e423b14da7cd398c1f26dc0f0278e918eea97f035bc48cfe783ec2681

  • SSDEEP

    384:RrnPpyQr13n3KBIPVIJv9zo5+mbVjyN6Tw/j0asEkx:7qv9M/bM7Yaq

Score
10/10

Malware Config

Extracted

Family

eternity

Wallets

47vk9PbPuHnEnazCn4tLpwPCWRLSMhpX9PD8WqpjchhTXisimD6j8EvRFDbPQHKUmHVq3vAM3DLytXLg8CqcdRXRFdPe92Q

Attributes
  • payload_urls

    https://raw.githubusercontent.com/VolVeRFM/SilentMiner-VolVeR/main/VolVeRBuilder/Resources/xmrig.exe

Signatures

  • Eternity family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3684-3150-0x0000000000400000-0x000000000040A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections