xmrig | 6d4e743edba8224001c4560e3b2e34e188c4b2fd7389c5bf08436a5af6c3bffb

Sharing

Copy URL Twitter E-mail

General

Target

6d4e743edba8224001c4560e3b2e34e188c4b2fd7389c5bf08436a5af6c3bffb
Size

4.6MB
MD5

38048501a027db19aa612b395bbf6ca1
SHA1

75e1680624a48fec1c0b8bd8552a9df18d052003
SHA256

6d4e743edba8224001c4560e3b2e34e188c4b2fd7389c5bf08436a5af6c3bffb
SHA512

c46ff51a75494f153731af4cd0e4096a26d9a10fd4d814a8cee4d81b5b892c85ff398b6c5e10e2ec2187b83525783fd7ec58a7cb454ea01fa1792f2a45fbe36e
SSDEEP

98304:YcEPjv+NfhDGIq5/6ZKI1vgorkD1bSVaVPfvqhhJlSURLg3Jyon:6Pjv+CD1bS4VPGhJlSQOyE

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 2 IoCs

miner

resource	yara_rule
sample	xmrig
sample	family_xmrig

Xmrig family
xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d4e743edba8224001c4560e3b2e34e188c4b2fd7389c5bf08436a5af6c3bffb

Files

6d4e743edba8224001c4560e3b2e34e188c4b2fd7389c5bf08436a5af6c3bffb
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RANDOMX
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT_CN
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 38KB - Virtual size: 2.7MB

.pdata Size: 118KB - Virtual size: 118KB

_RANDOMX Size: 3KB - Virtual size: 3KB

_TEXT_CN Size: 10KB - Virtual size: 9KB

_TEXT_CN Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 38KB - Virtual size: 2.7MB

.pdata
Size: 118KB - Virtual size: 118KB

_RANDOMX
Size: 3KB - Virtual size: 3KB

_TEXT_CN
Size: 10KB - Virtual size: 9KB

_TEXT_CN
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 31KB - Virtual size: 30KB