General

  • Target

    6c97e996c0865b3ea6a746cff2c0af20N.exe

  • Size

    1.5MB

  • MD5

    6c97e996c0865b3ea6a746cff2c0af20

  • SHA1

    56757c85fa1e64424c3c3d72f9ff0f9381faaed7

  • SHA256

    49c666e2b74202764c03d8c2a51a0494b52846a66540b55e6c84e74f4f37d154

  • SHA512

    c38ece6f7e0f63cc4c373dd86b12c1a1071ed1aba70b346439ee8c90546f584a2119c96a819e2fafb25e24928ee5c7b6233872e24920fe71688e7831dd94fb4c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOVGfaCYLM:knw9oUUEEDlGUh+hN4r

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c97e996c0865b3ea6a746cff2c0af20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections