Overview
overview
5Static
static
51.bat
windows7-x64
51.bat
windows10-2004-x64
510.bat
windows7-x64
510.bat
windows10-2004-x64
511.bat
windows7-x64
511.bat
windows10-2004-x64
512.bat
windows7-x64
512.bat
windows10-2004-x64
513.bat
windows7-x64
513.bat
windows10-2004-x64
514.bat
windows7-x64
514.bat
windows10-2004-x64
515.bat
windows7-x64
515.bat
windows10-2004-x64
516.bat
windows7-x64
516.bat
windows10-2004-x64
517.bat
windows7-x64
517.bat
windows10-2004-x64
518.bat
windows7-x64
518.bat
windows10-2004-x64
519.bat
windows7-x64
519.bat
windows10-2004-x64
52.bat
windows7-x64
52.bat
windows10-2004-x64
520.bat
windows7-x64
520.bat
windows10-2004-x64
521.bat
windows7-x64
521.bat
windows10-2004-x64
522.bat
windows7-x64
522.bat
windows10-2004-x64
523.bat
windows7-x64
523.bat
windows10-2004-x64
5Behavioral task
behavioral1
Sample
1.bat
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
10.bat
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
10.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
11.bat
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
11.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
12.bat
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
12.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
13.bat
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
13.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
14.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
14.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
15.bat
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
15.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
16.bat
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
16.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
17.bat
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
17.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
18.bat
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
18.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
19.bat
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
19.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
2.bat
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
2.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
20.bat
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
20.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
21.bat
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
21.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
22.bat
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
22.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
23.bat
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
23.bat
Resource
win10v2004-20241007-en
General
-
Target
task.zip
-
Size
2.3MB
-
MD5
c3e79bf55a130e89e832f810b97fb92c
-
SHA1
5ad652e3d3047e0e52129e691cbee50b937cd2db
-
SHA256
5a67276a89157d66a3e4f083c7c8da38798c0678f505d20fb43a71bf70f2c8ef
-
SHA512
d074de8b7b0fc87264f927a96065a2c8211b3396d32e9823c2a8c155f14e9560f110cda9f70115e797251ff57b5d79e776e3b349b7f6408c6247675544cf34fc
-
SSDEEP
49152:VtziLx6Iywz/7dgdi5af1ktMXmyMcjJuctXSyd0KcZ4j9:VtQx6VwzpgU5ad20DMcNXSyWKcu9
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cpuminer-sse2.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/cpuminer-sse2.exe unpack002/out.upx
Files
-
task.zip.zip
-
1.bat
-
10.bat
-
11.bat
-
12.bat
-
13.bat
-
14.bat
-
15.bat
-
16.bat
-
17.bat
-
18.bat
-
19.bat
-
2.bat
-
20.bat
-
21.bat
-
22.bat
-
23.bat
-
24.bat
-
25.bat
-
26.bat
-
27.bat
-
28.bat
-
29.bat
-
3.bat
-
30.bat
-
31.bat
-
32.bat
-
33.bat
-
34.bat
-
35.bat
-
36.bat
-
37.bat
-
38.bat
-
39.bat
-
4.bat
-
40.bat
-
5.bat
-
6.bat
-
7.bat
-
8.bat
-
9.bat
-
cpuminer-sse2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 105KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ