General

  • Target

    ce8448fed620f728e144a881663c72f0N.exe

  • Size

    1.9MB

  • MD5

    ce8448fed620f728e144a881663c72f0

  • SHA1

    6a655b3719419173a950c7d238f599a9ebf806b3

  • SHA256

    de9381d1f02a62cf127386a9b2398b62f13d9449ece9ad0533da53824b784681

  • SHA512

    ba86e9e86a74e7cdb32d8a41529fda9a7d10222898a8d335cad40cacab55fd0401a7ce8317a481b10866f8b9b9cd9f3b88c3ce4e39f76e94788fca4c6497fc63

  • SSDEEP

    49152:knw9oUUEEDl+xTMSqm3gZE+84t65sJ/+OwL:kQUEE0

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ce8448fed620f728e144a881663c72f0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections