Behavioral task
behavioral1
Sample
1.bat
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
10.bat
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
2.bat
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
3.bat
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
4.bat
Resource
win11-20241007-en
Behavioral task
behavioral6
Sample
5.bat
Resource
win11-20241007-en
Behavioral task
behavioral7
Sample
6.bat
Resource
win11-20241007-en
Behavioral task
behavioral8
Sample
7.bat
Resource
win11-20241007-en
Behavioral task
behavioral9
Sample
8.bat
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
9.bat
Resource
win11-20241007-en
General
-
Target
toxic.zip
-
Size
2.3MB
-
MD5
6a3d3511c53a644d3bdef3368e43a180
-
SHA1
73a39220f70c2bdf738c8be21a4fbf468aec47c2
-
SHA256
66a333ef591f08690e83711f770bbace984cb70f11add3c0590ef862e17e2295
-
SHA512
769429a70664a24e4f5a6a2e760c1628a17411b0de03e6d8ce4c4414143069b7833f9649ccd01fd0bd92bd312035fe4c4bfa9a50b37267597418db4b1c9cf5d3
-
SSDEEP
49152:dtziLx6Iywz/7dgdi5af1ktMXmyMcjJuctXSyd0KcZ4jX:dtQx6VwzpgU5ad20DMcNXSyWKcuX
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cpuminer-sse2.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/cpuminer-sse2.exe unpack002/out.upx
Files
-
toxic.zip.zip
-
1.bat
-
10.bat
-
2.bat
-
3.bat
-
4.bat
-
5.bat
-
6.bat
-
7.bat
-
8.bat
-
9.bat
-
cpuminer-sse2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 105KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ