Resubmissions

20-06-2024 12:21

240620-pja1haxaqf 10

19-06-2024 20:10

240619-yxpkgszbkh 10

General

  • Target

    140000000.ngen.exe

  • Size

    7.9MB

  • MD5

    dc1cb58795a488ae04b4eb85ee945a2e

  • SHA1

    5e0ced2cbc103f492171f0898aeb7a4bd444c54d

  • SHA256

    90ff2afb6a4a07c4174be011a38a9db876f2ac77b1bf45e74cb60f8c123453f1

  • SHA512

    d84ad249dcdbe28b659b54a2adc0dd23e9a692faa4de874617b7201497f58460bf1bb5c3edc81ba249caefbf55023505a9473fa5a7bca8013ff6f66e26086bc5

  • SSDEEP

    98304:NHjJcetx2WKUcuIBjyHS7M4NrZdQ/UxBq0L56CVtM3g1fiZri6BFAD045y4Ni:ketx2Td0KBq09jXLfwi6v5iy48

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 140000000.ngen.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections