Overview

overview

10

Static

static

10

ZHSImEs.exe

windows10-1703-x64

10

ZHSImEs.exe

windows7-x64

10

ZHSImEs.exe

windows10-2004-x64

10

ZHSImEs.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ZHSImEs.exe

  • Size

    1.7MB

  • MD5

    77c0d0e1c861eefb987aa69b1c644d3a

  • SHA1

    a968cfbbea7ddb37416ac734e94febeeef720f37

  • SHA256

    baa7ed76bcf04dad5f694130630e52496906180096d7f4d4b7108421a372b659

  • SHA512

    76503c86008e4f63a51ff52244664302626700006d171dcf209bc56a26d264836177b94f83c2afaf58bce8a8e3010620542064fc73d271d42d5e8e2eff596081

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjnJ2dsFchj0xIHCVotEX33wlL:knw9oUUEEDl37jcq4oKIiBW

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ZHSImEs.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections