General

  • Target

    db20ddcb6baccf40bc325e98df5865f0N.exe

  • Size

    1.9MB

  • MD5

    db20ddcb6baccf40bc325e98df5865f0

  • SHA1

    bd6969c226264b04e853d46d41e3a99e31aa7218

  • SHA256

    57a43b2645b79abaef63ed0a628376e0cc9084933a2acb08e63640659a0407e9

  • SHA512

    20ab691c280ac953944cd65ce63834dd8b14c1598f8b202c35191682f99ca626cc05985ac8cef077c5b61291c953e5b2fb9b4e04444342955f94800e981ada3b

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTXptRmKWXkO1t7XSXRBAiGulF:RWWBiban

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db20ddcb6baccf40bc325e98df5865f0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections