General

  • Target

    6456b35816d446c6113f19ef120dc020N.exe

  • Size

    1.8MB

  • MD5

    6456b35816d446c6113f19ef120dc020

  • SHA1

    d08ad6282f810b713de75458e681a8eb77acff1c

  • SHA256

    5205c0b78e76be59f1b8cca5311bf667c1354c898f4e34973d7e721d26b51149

  • SHA512

    988fe9174b206e3d2f41fb63d94271e462893c224dc4866178391b4b5b8ca00cf6e14b5cdd6de71565323caea0e80b6d8dd3aed868fe63ed0dccb1c5f6489071

  • SSDEEP

    49152:knw9oUUEEDlnd+XRqJZwTKe5lpFVcOtcqB:kQUEEu

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6456b35816d446c6113f19ef120dc020N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections