General

  • Target

    6a0b9c98e28d13c63be1373ad4faaa50N.exe

  • Size

    1.8MB

  • MD5

    6a0b9c98e28d13c63be1373ad4faaa50

  • SHA1

    7452155d158850155e4f7e2e1f8cbf4e9fb6889f

  • SHA256

    4cf6c2f7c86584b2f06e1a1c5ed228febb0ae2b57b7b7e37cd48df832c753777

  • SHA512

    587fd84c2cadbca934854f32d8aaabd741adef5ec60b717dd039c1193843663e0ec2144d95566cba3fa8ee407b032519f3ac5a52029c4229eb3a0b37d99bfded

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOA2MAsFhDjvhwcyMA3ryYNdio13c:knw9oUUEEDlGUnwwnAs5dk/1X+P

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a0b9c98e28d13c63be1373ad4faaa50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections