General

  • Target

    be95207a5f09ea47552a66b97964f130N.exe

  • Size

    1.8MB

  • MD5

    be95207a5f09ea47552a66b97964f130

  • SHA1

    ddb97b725c768ecd1faeb7574de963d804716a16

  • SHA256

    3d780dd00b899b7a8be0791693ac931bec2ae7b602d43286b433eee85a28744b

  • SHA512

    bef284ffaf23306cb2510754aac62598d286691e3ae5013e0b42ddc2eca57fec80c094bcbdd42f728779c316d6f241dd556a35aaa2a9c09b6fb99d85a8ef9e30

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHqRi:NABB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • be95207a5f09ea47552a66b97964f130N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections