General

  • Target

    msxml.exe

  • Size

    366KB

  • MD5

    1ef7d145bf7153292ea33fe7c900ece9

  • SHA1

    8f0323e577d4df82c7faa4cd6ba7303b38b6a26e

  • SHA256

    ece3cfdb75aaabc570bf38af6f4653f73101c1641ce78a4bb146e62d9ac0cd50

  • SHA512

    640985ba6ff2488b77ab6eb25507b29e1f9f5b005a85afee7edbaaadfed6b990f9402019b13df08bd3845d90077f0d674cd1c48144d1ac3abcf63b4733d1432c

  • SSDEEP

    6144:EUECsqqD9Y7PaFmU5wUkibQmXNyCUq4yVqMbNOgLvjaaOwDO6j7A7uJVsoGW/sQR:jdpqJY7PaRkdEyXqxqMbNhja7Zm6uJpB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • msxml.exe
    .dll windows:6 windows x64 arch:x64

    e80b1ef709e071173651c6bb53a95da0


    Headers

    Imports

    Exports

    Sections