General

  • Target

    Windows.zip

  • Size

    2.3MB

  • MD5

    3b98e8c989b4e0ee81125626e4125de5

  • SHA1

    075e9250fc7ffea1f0a4a5441c1dfb956016e5f3

  • SHA256

    bc4708d1d57ae58ca48cc58b02a4965908b4b5030c48398f593b4bffb5aa58f9

  • SHA512

    07553d6dea91683077d1939dac9a5b4fdcabdaddfacd0193be4dbcac959a7ff5cded94d3352278c5c2eb5e42c888f62a59e99f9f6c0261d610629541ed071987

  • SSDEEP

    49152:ypcCbKqOgA8fN2cSw79tSntVQoEZhsMP28Bs/aDM++HGxZM9V7P:qbOt3t9EHsMPZBs/a5iGfcV7P

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Windows.zip
    .zip

    Password: infected

  • bat恶意脚本/CB160E725249E2C0534EB01EC3D8E049
    .ps1
  • bat恶意脚本/F7DA4506E638185AF1F1B2FE30A2E9D2
    .ps1
  • 挖矿程序/3EDCDE37DCECB1B5A70B727EA36521DE
    .exe windows:6 windows x64 arch:x64

    Password: infected

    f582800aab9508d46a8a2582b5ab586d


    Headers

    Imports

    Sections

  • 挖矿配置文件/61DEF7B3B98458A40FFFA42A19DDF258