Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Summary | ZeroBOX

%2477xmrig.exe

XMRig Miner Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check

Category	Machine	Started	Completed
FILE	s1_win7_x6401	April 17, 2024, 7:35 a.m.	April 17, 2024, 7:35 a.m.

Size	6.1MB
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`4bd2631adfe4a256a72614c3f0d1aced`
SHA256	`810838fe05bf0fac2ca9659efa6d2d5bb6f0e324ce9330ad1ba6ec636844fb84`
CRC32	`E0099861`
ssdeep	`98304:t007TSZB9luIq7GnaU/XdrIlSABFtoRlgmqILLN4qbtTUNGDC2Zvi26:RTSKftoRGmqw4qbtoyjZvi26`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library XMRig_Miner_IN - XMRig Miner PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The executable contains unknown PE section names indicative of a packer (could be a false positive) (3 events)

section	_RANDOMX
section	_TEXT_CN
section	_RDATA