Resubmissions

20-12-2024 03:49

241220-edjqcaynaz 10

20-12-2024 03:47

241220-ecbcksymgz 10

General

  • Target

    windows.zip

  • Size

    2.3MB

  • MD5

    211b4a5689086e2706e0121dc39bb0a1

  • SHA1

    08e732aef4f12ac6a6af52602a11ae5ca1781a9a

  • SHA256

    74544a16f620605e4812a5e1b9615388f2daafe0af8d96060d1d0a289cc3c656

  • SHA512

    081c8fc2c69e99192555c069445e8d4ae0dcd370bfc5aa1881d3bf64d6652868f2dd6bf2af6d3412be268b5a692eee16d39707c31b9794f9429ded06b860214c

  • SSDEEP

    49152:tpcCbKqOgA8fN2cSw79tSntVQoEZhsMP28Bs/aDM++HGxZM9V7K:DbOt3t9EHsMPZBs/a5iGfcV7K

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windows.zip
    .zip
  • config.json
  • kthmimu.exe
    .exe windows:6 windows x64 arch:x64

    f582800aab9508d46a8a2582b5ab586d


    Headers

    Imports

    Sections

  • start.ps1
    .ps1