General

  • Target

    8b2f4b7fd34f49b8240970e3d967e6e3

  • Size

    5.1MB

  • MD5

    8b2f4b7fd34f49b8240970e3d967e6e3

  • SHA1

    6e2fbdb433bae3de36b279ae925bafe900de6259

  • SHA256

    8501bf3ccacbdb92c060f7d99c1416794d6f86ba553aa08e80cca1239c299f54

  • SHA512

    e15d951c5d08ee1ab58eab325bd59adc7ea5d3cdf8ccfd63a6bd4f8cd71040b5da8f434688889fd913e7cf22f1a5ec907b10bb213f461c14c84f1f8ca2cdef9c

  • SSDEEP

    49152:bw70PBG3x5FDSp+9UbgWCHAJR9NRp3s5Wj2YdW0wcAMlo9MjS5m+AJ:8IpG3xep+SbgQZWWjns0jbeQ+A

Malware Config

Signatures

  • Golang_generic_botnet family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • golang_generic_dropper_component 1 IoCs

    Detects 'dropper' component for dropping additional files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b2f4b7fd34f49b8240970e3d967e6e3
    .exe windows:6 windows x64 arch:x64

    93a138801d9601e4c36e6274c8b9d111


    Headers

    Imports

    Sections