General
-
Target
2025-04-07_45fd94940980a22628d73588e4f11c2d_black-basta_ezcob_xmrig
-
Size
4.4MB
-
MD5
45fd94940980a22628d73588e4f11c2d
-
SHA1
17d63ec8db2b03cace0b01dd1ec3c3f1d6c4577e
-
SHA256
198459f48b3a14818898436be495d0e481944a7dabcef8d5c138ff27badbb33f
-
SHA512
d875539fd8e8b0fbe3132c83f6c64e0da7049ef70b737f33b29585adc8fece01767fdf81ccc8fc44d3dae8fde4aa7cd6923dbf426177d7d2f2821af598ec12ea
-
SSDEEP
98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr8P:zbBeSFk5
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-07_45fd94940980a22628d73588e4f11c2d_black-basta_ezcob_xmrig
Files
-
2025-04-07_45fd94940980a22628d73588e4f11c2d_black-basta_ezcob_xmrig.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE