General

  • Target

    101c9b82be57e7054389a8075125f160N.exe

  • Size

    1.8MB

  • MD5

    101c9b82be57e7054389a8075125f160

  • SHA1

    5ba844bcd771e111daa151d2ba8dae8581f4f03b

  • SHA256

    3477075da9048b99d1ef844a10220056db839451ad262b07a458813218cc3466

  • SHA512

    0ac6fa22bca5ac341765045aff8798107c6828b5b47e4159e1c093043e064d376ed72f2da7950f94d7c5d9147a763141157f37a32962362e429fcbb83f0416cd

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCnfJCwCc4MAKFpMloooIX3Gi:Lz071uv4BPMkFfdgIZohteLMxRwWY24

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 101c9b82be57e7054389a8075125f160N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections