General

  • Target

    0c7eaef8032116dbc7da5fcee8900068b617245017ddfc29c21f050b1cd5aac8

  • Size

    4.5MB

  • MD5

    2c75e91f84cb0113d917c1c3d830d6b5

  • SHA1

    d66604fd313686bfad73f96d4596c607cde55239

  • SHA256

    0c7eaef8032116dbc7da5fcee8900068b617245017ddfc29c21f050b1cd5aac8

  • SHA512

    c5686298609cccf118ea87e0660563460ef396b25e8effa1b40dd806b0a74a36c4f864ecb43a8701c7daccdc59ce8b4eb6955cd8a0d5835841935337a8a9a539

  • SSDEEP

    98304:DMUaI9OMzejqikpYbAI7XLyhq6IvorAJKn6kD801cgl0+BhV1C8q0DBA:I8Oxy61y6g38ScglnBh20F

Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 3 IoCs
  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 0c7eaef8032116dbc7da5fcee8900068b617245017ddfc29c21f050b1cd5aac8
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $R0/NsCpuCNMiner32.exe
    .exe windows:5 windows x86 arch:x86

    605c19578abec75fc74907473f752c23


    Headers

    Imports

    Exports

    Sections

  • $R0/NsCpuCNMiner64.exe
    .exe windows:5 windows x64 arch:x64

    de374bd0d52433ab46e2fe7e4daf1ffe


    Headers

    Imports

    Exports

    Sections

  • $R0/NsGpuCNMiner.exe
    .exe windows:6 windows x64 arch:x64

    6df56667a363c9a6dd7a435abe9a4886


    Headers

    Imports

    Exports

    Sections