General

  • Target

    e5c6b0e7e4a6c83a9a4dc96c7cf4dbaa47cdc98eaadf8b8e6fb6230b0077f8b8

  • Size

    1.8MB

  • MD5

    e1d3d66ed34ec76414720b331d1a53dd

  • SHA1

    053a5f3f278cf066099acd4755de79b424fdbc7f

  • SHA256

    e5c6b0e7e4a6c83a9a4dc96c7cf4dbaa47cdc98eaadf8b8e6fb6230b0077f8b8

  • SHA512

    d80a388527d6c9220038b82788a3efb89aae2ba7977912d9519cc6e7aafe64e4a67899501d5059525e282607c01c8ba23e3b03a470cac9de8c22286806080c4b

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZX71Fq8++fb:NABI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e5c6b0e7e4a6c83a9a4dc96c7cf4dbaa47cdc98eaadf8b8e6fb6230b0077f8b8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections