General

  • Target

    2396-132-0x0000000000400000-0x000000000040A000-memory.dmp

  • Size

    40KB

  • MD5

    0d4d9debb9684faff302ed535c016b59

  • SHA1

    757221cbfd2cd1a2b1a129011508c1b12d524fbc

  • SHA256

    d058ce931c4067141268a5bdf1c3cee70c5a3163f0d6a5e50265ecee89b0c3a7

  • SHA512

    9e4ca402034a8e6ead346dc2d031c846bee744398915ff23639d3b9cd9c8050c0d560037d661912cf6cdf9b9fa487a35a0a76dc41bd54e9a3c5f04ed6f991a47

  • SSDEEP

    384:PrnPpyQr13n3KBIPVIJv9zo5+mbVjyN6Tw/j0asEkx:Fqv9M/bM7Yaq

Score
10/10

Malware Config

Extracted

Family

eternity

Wallets

47vk9PbPuHnEnazCn4tLpwPCWRLSMhpX9PD8WqpjchhTXisimD6j8EvRFDbPQHKUmHVq3vAM3DLytXLg8CqcdRXRFdPe92Q

Attributes
  • payload_urls

    https://raw.githubusercontent.com/VolVeRFM/SilentMiner-VolVeR/main/VolVeRBuilder/Resources/xmrig.exe

Signatures

  • Eternity family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2396-132-0x0000000000400000-0x000000000040A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections