General

  • Target

    ec805938bae6185896941e8254092820N.exe

  • Size

    1.6MB

  • MD5

    ec805938bae6185896941e8254092820

  • SHA1

    f2d0840da11fd9f76bca8eea9bc9a3b4054a234d

  • SHA256

    5690199a9a8585c3d3accb9f13286e5f509c5ced6253590c231bac74d8f3fe6f

  • SHA512

    0c0984f12789bf067f62f2259556f0ded311ae3ee0b8ed11af61bb56948bb81b9426980e6872a8f937f747140753df2f44a47164400d50a4b95ff6957a454a45

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGV0Bm2YkYnKwaAt0g:knw9oUUEEDlnJ2k2oj6tPYnAg

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ec805938bae6185896941e8254092820N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections