Overview
overview
5Static
static
51.bat
windows11-21h2-x64
510.bat
windows11-21h2-x64
511.bat
windows11-21h2-x64
12.bat
windows11-21h2-x64
513.bat
windows11-21h2-x64
14.bat
windows11-21h2-x64
515.bat
windows11-21h2-x64
52.bat
windows11-21h2-x64
3.bat
windows11-21h2-x64
54.bat
windows11-21h2-x64
55.bat
windows11-21h2-x64
56.bat
windows11-21h2-x64
57.bat
windows11-21h2-x64
58.bat
windows11-21h2-x64
59.bat
windows11-21h2-x64
5cpuminer-sse2.exe
windows11-21h2-x64
5Behavioral task
behavioral1
Sample
1.bat
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
10.bat
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
11.bat
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
12.bat
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
13.bat
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
14.bat
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
15.bat
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
2.bat
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
3.bat
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
4.bat
Resource
win11-20241007-en
Behavioral task
behavioral11
Sample
5.bat
Resource
win11-20241007-en
Behavioral task
behavioral12
Sample
6.bat
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
7.bat
Resource
win11-20241007-en
Behavioral task
behavioral14
Sample
8.bat
Resource
win11-20241007-en
Behavioral task
behavioral15
Sample
9.bat
Resource
win11-20241007-en
Behavioral task
behavioral16
Sample
cpuminer-sse2.exe
Resource
win11-20241007-en
General
-
Target
tcd.zip
-
Size
2.3MB
-
MD5
0fbe4ef07eb2fdc36c1fbffdc65d3281
-
SHA1
8c9af7d7d6bb61b4ad8e94bf7989dc9595c5fe1e
-
SHA256
59ecb6df9323759a5fabdb241c905ecd378133252cb59b4ea3acdabb6862bcdd
-
SHA512
51a9714fbe0c82c1f36af0d6a7ef44ae66878b6cf539858a1c226aded7a16a1d0ea23290ca4ac77779f21eb1b46f3b489050d85f2fd7a0a673d5690248ac0ccc
-
SSDEEP
49152:KtziLx6Iywz/7dgdi5af1ktMXmyMcjJuctXSyd0KcZ4j6:KtQx6VwzpgU5ad20DMcNXSyWKcu6
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cpuminer-sse2.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/cpuminer-sse2.exe unpack002/out.upx
Files
-
tcd.zip.zip
-
1.bat
-
10.bat
-
11.bat
-
12.bat
-
13.bat
-
14.bat
-
15.bat
-
2.bat
-
3.bat
-
4.bat
-
5.bat
-
6.bat
-
7.bat
-
8.bat
-
9.bat
-
cpuminer-sse2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 105KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ