Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rose-Stealer_old-main.zip

  • Size

    931KB

  • MD5

    2c22a33f0994faa508952bfe8332a75b

  • SHA1

    a1b7e7a8540ee667eb72497b28bc52a382a3bd4f

  • SHA256

    0f79ff7b65b9f14492d728a2964dbd9bf55ac122d3ebe5c24cdbb7533cdb2b3b

  • SHA512

    540d322205df94fac6e25c52dc287d9f9937b825b95e05740fddad494fd97e2022be0c59847138d0afbd83764723b3cb72c6a4b91abeef7fb22b1916d72b5f44

  • SSDEEP

    12288:alABu9rpFvtglu49E2U2pz7/0Er06PlLUj+/xDryJQzElz1j3VD9bLPWBJQsGrYX:W+GpFV6u4nzNPGSRWaAh5D9bLW37Gr9Y

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Rose-Stealer_old-main.zip
    .zip
  • Rose-Stealer_old-main/.bandit
  • Rose-Stealer_old-main/.deepsource.toml
  • Rose-Stealer_old-main/.github/ISSUE_TEMPLATE/bug_report.md
  • Rose-Stealer_old-main/.github/ISSUE_TEMPLATE/feature_request.md
  • Rose-Stealer_old-main/.gitignore
  • Rose-Stealer_old-main/LICENSE
  • Rose-Stealer_old-main/README.md
  • Rose-Stealer_old-main/build.bat
  • Rose-Stealer_old-main/docs/CHANGELOG.md
  • Rose-Stealer_old-main/docs/FEATURES.md
  • Rose-Stealer_old-main/docs/KNIGHT.md
  • Rose-Stealer_old-main/resources/assets/builder.png
    .png
  • Rose-Stealer_old-main/resources/assets/rose.png
    .png
  • Rose-Stealer_old-main/resources/assets/roseloadingscreen.mp4
  • Rose-Stealer_old-main/resources/data/injection.js
    .js
  • Rose-Stealer_old-main/resources/data/obf-injection.js
    .js
  • Rose-Stealer_old-main/resources/data/requirements.txt
  • Rose-Stealer_old-main/resources/source/dev/xmri.py
  • Rose-Stealer_old-main/resources/source/old/InjectX.py
  • Rose-Stealer_old-main/resources/source/old/_file.py
  • Rose-Stealer_old-main/resources/source/old/_random_string.py
  • Rose-Stealer_old-main/resources/source/old/_roblox.py
  • Rose-Stealer_old-main/resources/source/old/_startup.py
  • Rose-Stealer_old-main/resources/source/old/_webhook.py
  • Rose-Stealer_old-main/resources/source/old/antivm.py
  • Rose-Stealer_old-main/resources/source/old/block_sites.py
  • Rose-Stealer_old-main/resources/source/old/browser.py
  • Rose-Stealer_old-main/resources/source/old/config.py
  • Rose-Stealer_old-main/resources/source/old/discordc.py
  • Rose-Stealer_old-main/resources/source/old/games.py
  • Rose-Stealer_old-main/resources/source/old/ipinf.py
  • Rose-Stealer_old-main/resources/source/old/knight_rat.py
  • Rose-Stealer_old-main/resources/source/old/main.py
  • Rose-Stealer_old-main/resources/source/old/ransomware.py
  • Rose-Stealer_old-main/resources/source/old/rose_rat.py
  • Rose-Stealer_old-main/resources/source/old/sysinf.py
  • Rose-Stealer_old-main/resources/source/old/tbsod.py
  • Rose-Stealer_old-main/resources/source/old/uac_bypass.py
  • Rose-Stealer_old-main/resources/source/old/webhook.py
  • Rose-Stealer_old-main/resources/source/old/xmr_miner.py
    .py .vbs
  • Rose-Stealer_old-main/resources/source/rose.py
  • Rose-Stealer_old-main/resources/ui/builder.py
  • Rose-Stealer_old-main/resources/ui/msg.txt
  • Rose-Stealer_old-main/resources/utils/comp/cert
  • Rose-Stealer_old-main/resources/utils/comp/post.py
  • Rose-Stealer_old-main/resources/utils/comp/sigthief.py
    .py .sh linux
  • Rose-Stealer_old-main/resources/utils/obfuscation/blankobf.py
  • Rose-Stealer_old-main/resources/utils/obfuscation/obf.py
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/LICENSE
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/README.md
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/pycloak/main.py
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/requirements.txt
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/setup.py
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/tests/in.py
  • Rose-Stealer_old-main/resources/utils/obfuscation/pycloak-main/tests/out.py
  • Rose-Stealer_old-main/resources/utils/old_build/rose_builder.pyw
  • Rose-Stealer_old-main/resources/utils/rosedec/README.md
  • Rose-Stealer_old-main/resources/utils/rosedec/decrequirements.txt
  • Rose-Stealer_old-main/resources/utils/rosedec/decrypter.bat
  • Rose-Stealer_old-main/resources/utils/rosedec/rose-decrypter.py
  • Rose-Stealer_old-main/resources/utils/unblocker/unblock_sites.py
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/COPYING
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/LICENSE
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/NEWS
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/README
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/THANKS.txt
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/upx-doc.html
    .html .vbs polyglot
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/upx-doc.txt
    .vbs
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/upx.1
    .vbs
  • Rose-Stealer_old-main/resources/utils/upx-4.1.0-win64/upx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Rose-Stealer_old-main/setup.cfg
  • Rose-Stealer_old-main/tox.ini