xmrig | 20240907094f7320a20567fb898b28cdb4f8982acerburyuk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240907094f7320a20567fb898b28cdb4f8982acerburyuk
Size

580KB
MD5

094f7320a20567fb898b28cdb4f8982a
SHA1

2e407176e5c1e17c180c4f8c05302b2c699e5e3c
SHA256

98ddda2bd476c7409da637b72c16e5930809695bc5e5f4bbc81e81494b23467f
SHA512

635489689edba6531842f7b61dd44a193a4e98ac2462321adb23548db428e6b6c45840204c1b76121849fc2048718c0e05fd02918c102b03bf916737c649b42f
SSDEEP

12288:ECKufHEOkcM2Wmc0H4BJVWAefvU36ufg+Mem0zxq3/XgjX:DKuf3uBJrefvU3Zo+MemsW

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240907094f7320a20567fb898b28cdb4f8982acerburyuk

Files

20240907094f7320a20567fb898b28cdb4f8982acerburyuk
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ