Resubmissions

20-02-2024 07:34

240220-jd756adc61 7

20-02-2024 07:31

240220-jcwezadc4z 7

General

  • Target

    cpuminer-multi-rel1.3.1-x64.zip

  • Size

    4.2MB

  • MD5

    d51d1586a806f098761dae6934aa6a4b

  • SHA1

    8028751d54b7b1ac513dd360286c96e389ccda16

  • SHA256

    1208fb1c3cbdcbfc5089d46f4ab339d494139ba904e84a41a1707f7723edb7e2

  • SHA512

    b6b9e51c35224d70585a3d1a09e220670f46fd1d38a3237583fbdb4c4acd57f6803a7893e1aece24bee4d7598710ddefa93f0451cdcb6b0a5fe050d416d7a999

  • SSDEEP

    98304:E65BrUcuBokjm41JWsB6I5d7fUL/wHyWKkhag74cp13bXwDDwKWqi4QGubGs+:E6nY1m4XBYIDfUUHyW7agci1rXKUGNQ6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • cpuminer-multi-rel1.3.1-x64.zip
    .zip
  • RUN-TimeTravel.bat
  • api/index.php
  • api/local-sample.php
  • api/websocket.htm
    .html .js polyglot
  • cpuminer-gw64-avx2.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • cpuminer-gw64-core2.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • cpuminer-gw64-corei7.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections