General

  • Target

    d20a3662ba21e7d471f672bce27ceb80N.exe

  • Size

    1.7MB

  • MD5

    d20a3662ba21e7d471f672bce27ceb80

  • SHA1

    07a83695a3fe1c9502ee699d92410e79e293fe38

  • SHA256

    ea09f0c2865480372b9bd67d33930e334f533ce0d62494e5d335ac54f26f3fbc

  • SHA512

    6ffdce9f6a5a2ed056345340b45f760be8505570da2de5414a939f57f129b84613a81728c713169921a2f471ce69802d424d168e197f42497588a3428260e496

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDHxnz:knw9oUUEEDlGUJ8Y9ctYVk68NOG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d20a3662ba21e7d471f672bce27ceb80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections