General

  • Target

    hezb.zip

  • Size

    6.3MB

  • MD5

    de79dc65c13418d2e9dca7af8c21d3e6

  • SHA1

    9dbe9e7f1ca1dd69ac5258fbc2acf8c6ad320264

  • SHA256

    a0c236fed9935b975ceba78c77343c6c2a1d0ac64ccff00e08328d0b8af360c4

  • SHA512

    427cebf0ce77e355823409d24d0f53d42e6d6e9c5dc63c42ab1215f539256831c4e9fd8b44cde8894c8f39682e3095da555c0e280424823bd2d4cb66b27cf312

  • SSDEEP

    98304:CM+B5I5UqFFhVqvIyYPnOV3+JmuVTmwFgdb2ip7B/0FxMWNfIBCHh:c5I5DF+v0OAJm2TmVz7gx9NkCB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 4 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hezb.zip
    .zip

    Password: infected

  • hezb/样本/Linux/sh恶意脚本/955ABC9598BEFCA8025B806E9E14FEB1
    .sh linux
  • hezb/样本/Linux/sh恶意脚本/B954CBA4C2A5ED68CE8AC88BF4AA484D
    .sh linux
  • hezb/样本/Linux/恶意软件/19827AF3181C12EE7A89CEE51F254E2C
    .elf linux x64
  • hezb/样本/Linux/挖矿程序/ED573E9B9087C650D06CFB76C62C0CFB
    .elf linux x64
  • hezb/样本/Linux/挖矿配置文件/101661518965EA842D703D02D84933D8
  • hezb/样本/Linux/漏洞利用程序/8E3E276E650E6EA21BEA16C8C2F3E8C3
    .elf linux x64
  • hezb/样本/Windows/bat恶意脚本/CB160E725249E2C0534EB01EC3D8E049
    .ps1
  • hezb/样本/Windows/bat恶意脚本/F7DA4506E638185AF1F1B2FE30A2E9D2
    .ps1
  • hezb/样本/Windows/挖矿程序/3EDCDE37DCECB1B5A70B727EA36521DE
    .exe windows:6 windows x64 arch:x64

    Password: infected

    f582800aab9508d46a8a2582b5ab586d


    Headers

    Imports

    Sections

  • hezb/样本/Windows/挖矿配置文件/61DEF7B3B98458A40FFFA42A19DDF258