Behavioral task
behavioral1
Sample
2025-03-30_1451b02c5e5dc76b1a92646694c42d12_aspxspy_black-basta_ezcob_xmrig.exe
Resource
win7-20240903-en
General
-
Target
2025-03-30_1451b02c5e5dc76b1a92646694c42d12_aspxspy_black-basta_ezcob_xmrig
-
Size
5.0MB
-
MD5
1451b02c5e5dc76b1a92646694c42d12
-
SHA1
ff006ca297474ffa2a42991970e2e5c6a6ea2d4f
-
SHA256
9365a31efe918927c5b457b801c98b857b5743db90a065e330bee852cb1c43e9
-
SHA512
8873469e49e8336c409c42b5b1af4ff14620228da0d2d11d19b4bdc5a2746244fc822bd44207c3702a071309b3386fcd7152cd7b18b30dcb9c202db1dc20b143
-
SSDEEP
98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr8n:zbBeSFkF
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-03-30_1451b02c5e5dc76b1a92646694c42d12_aspxspy_black-basta_ezcob_xmrig
Files
-
2025-03-30_1451b02c5e5dc76b1a92646694c42d12_aspxspy_black-basta_ezcob_xmrig.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE