General

  • Target

    20df3113a988a9afd9d3fb4e49fd1b70.exe

  • Size

    1.1MB

  • MD5

    20df3113a988a9afd9d3fb4e49fd1b70

  • SHA1

    970cb85ab5e4cf09806614748cc3eb463b8900ff

  • SHA256

    6a44a8d5a894abed9abf5c61eaa63cba7ddc80346a658e59fe2a6ca48c1f17a3

  • SHA512

    9c3a98ef55d49a1a0c25d0879c7cc6e88660232a04f302a3c17ebf73165d6c7c37300edbd94002a8327fd23e5a518ba23b145a71acd59a51fb52e262074c6bb7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYsV:knw9oUUEEDlGUJ8Y0

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20df3113a988a9afd9d3fb4e49fd1b70.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections