Overview

overview

10

Static

static

10

570a062092...a3.exe

windows7-x64

1

570a062092...a3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d67e4f13be920cfa287820bfb5120352.bin

  • Size

    2.2MB

  • MD5

    d2b742769f33356f1d334543c3c5f518

  • SHA1

    aef0dcb2a90e355481b41efab7b7c43e5688df7c

  • SHA256

    0377fcbc97ec41fada12e370e3ddc44dcda92a927776f234278b603dd6f15872

  • SHA512

    6fde1bfce6fce742edf5612a47bb07f9b4fd0b45dc7a391743f7e98aafa45430889f93d21e2fc9dcae9f40bf6ae2bf07ee7674c5dff16451d9c479895fe380b6

  • SSDEEP

    49152:b/hYa9lXORSe3daK67sWxgJ74Gd1s/0eFQmq:qa9lXeSqdaK6wZ3+Emq

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d67e4f13be920cfa287820bfb5120352.bin
    .zip

    Password: infected

  • 570a0620925b20b16863882a31f7602e92fb5f193305bc20e0990c59607734a3.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected


    Headers

    Sections