MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 66fa2281567f268adefb54e91b88bfbd7a08eee6c40ff4aafa31472b8d49a3a6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


CoinMiner


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 66fa2281567f268adefb54e91b88bfbd7a08eee6c40ff4aafa31472b8d49a3a6
SHA3-384 hash: 1721d38e301c302b64f7c7434fb050c1009d982d8748b91ac1a24f2fde676150be43e176fd468cee8e97d92cda1886cf
SHA1 hash: dc25ca8d22001ce234872aec3549d11fc7b05849
MD5 hash: 0fdb6dab6f29e54b5220292da7e33be3
humanhash: robert-arkansas-violet-iowa
File name:0fdb6dab6f29e54b5220292da7e33be3.exe
Download: download sample
Signature CoinMiner
Create hunting rule
File size:1'189'888 bytes
First seen:2022-03-21 08:12:42 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 3eb7622479f8b2c1a30189a3df7139f3 (25 x CoinMiner)
ssdeep 24576:2y+jMkaTDtuF6kYK2MS6+wxaD21EtYlsVVRylcOJLrTkHurKge:2yFkaTDtuMkxrU3t9icaLMur
TLSH T1A2453342D6E4FC32D92AA37A5205EF5EDF54F526C7CF823CF638407AC9A461610477A2
Reporter abuse_ch
Tags:CoinMiner exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
219
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/253357/
Detection(s):
Win.Dropper.DisguisedXMRigMiner-9938413-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Searching for the window
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
anti-debug packed
Link:
https://www.filescan.io/uploads/62383391dfdfa8501cc5b2f3/reports/5bda21f0-08d7-419f-a2b1-b9e9173f3ec2/overview
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
XMRig Miner
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/6fd4a82f-8b60-4ddb-8587-d8578646ec41
Result
Threat name:
Xmrig
Create hunting rule
Detection:
malicious
Classification:
mine
Score:
72 / 100
Link:
https://www.joesandbox.com/analysis/960857
Signature
Found strings related to Crypto-Mining
Machine Learning detection for sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Xmrig cryptocurrency miner
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/66fa2281567f268adefb54e91b88bfbd7a08eee6c40ff4aafa31472b8d49a3a6/
Threat name:
Win64.Coinminer.BitCoinMiner
Create hunting rule
Status:
Malicious
First seen:
2022-03-21 08:13:12 UTC
File Type:
PE+ (Exe)
Extracted files:
13
AV detection:
18 of 42 (42.86%)
Threat level:
  4/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=m35cfakwp4tivxx3kturxcf7xv5ar3xgyqh7jkx2gfdsxdkjuota._file
Verdict:
malicious
Result
Malware family:
n/a
Score:
  8/10
Tags:
upx
Link:
https://tria.ge/reports/220321-j4exasafbj/
Unpacked files
SH256 hash:
66fa2281567f268adefb54e91b88bfbd7a08eee6c40ff4aafa31472b8d49a3a6
MD5 hash:
0fdb6dab6f29e54b5220292da7e33be3
SHA1 hash:
dc25ca8d22001ce234872aec3549d11fc7b05849
Link:
https://www.unpac.me/results/4949db74-1c53-49f4-beeb-070a5718fa50/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.05
Link:
https://yomi.yoroi.company/submissions/66fa2281567f268adefb54e91b88bfbd7a08eee6c40ff4aafa31472b8d49a3a6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/253357/

Comments