General
-
Target
2025-04-07_544565fd5c6e909866eeb0de280ac48c_black-basta_ezcob_xmrig
-
Size
4.4MB
-
MD5
544565fd5c6e909866eeb0de280ac48c
-
SHA1
d49d41275d11f5e303a81bf27ba9ad658ed7fead
-
SHA256
f93d724863c0ed80f7fb73464e490902d1c309f6e947f3ee8fbd18a3afa7f989
-
SHA512
7bf7cfa2891632c8e45f8d7c26267b47189e04c3b9623801f20ffd6848283397fa3162be49dad48fd32d2c001816c4c4c573a10b0e2debc44b157016566b6b02
-
SSDEEP
98304:z1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHr8v:zbBeSFk1
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-07_544565fd5c6e909866eeb0de280ac48c_black-basta_ezcob_xmrig
Files
-
2025-04-07_544565fd5c6e909866eeb0de280ac48c_black-basta_ezcob_xmrig.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE