General

  • Target

    1206b370204d6cdda392cca8be5d4a00N.exe

  • Size

    1.7MB

  • MD5

    1206b370204d6cdda392cca8be5d4a00

  • SHA1

    d163a647a42b558efd31c0e4e7a5a141755528b6

  • SHA256

    554df1bd0dd31fe08cbf626c8782736093cf473a12e74dd9d815603c460a5df2

  • SHA512

    610f6617bd56871b0fa08f88cd4dd33aae892f9d551a847c1c0ae55dea7de3bf1b6d0abc7334909ef46d491fb38ace081d73e6ebdaba728c5fbec9f7ecfae30d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8BoC09aYCmcDff91WgyNl+93nrBjD:ROdWCCi7/rahwNU6ff91TnFjex7vG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1206b370204d6cdda392cca8be5d4a00N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections