General
-
Target
2025-04-07_27e56b51576319f65fdb43064a0f6fae_aspxspy_black-basta_ezcob_imuler_xmrig
-
Size
5.7MB
-
MD5
27e56b51576319f65fdb43064a0f6fae
-
SHA1
6a2f296ebe2209a2c211be3f57be0b1b2352c879
-
SHA256
31f21a49299d074e17b8c6a532bdd52336c237e213c829a6c1de43a46a4d854b
-
SHA512
a2240b5e773bda32dd6577ec6e2fea4296cc8b7877a90ed1ff0c9e44a84322b44d78781f3b6ea4adf2034edc60b5508d1396d4288c28a0c1ccc6aafc444a9bad
-
SSDEEP
98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr86:zbBeSFk8
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-07_27e56b51576319f65fdb43064a0f6fae_aspxspy_black-basta_ezcob_imuler_xmrig
Files
-
2025-04-07_27e56b51576319f65fdb43064a0f6fae_aspxspy_black-basta_ezcob_imuler_xmrig.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE