General

  • Target

    016af99f51c1c8f182e2ac7b1952bd80N.exe

  • Size

    2.2MB

  • MD5

    016af99f51c1c8f182e2ac7b1952bd80

  • SHA1

    66aa63e0a4527359731f55aa0fffe2816d10767e

  • SHA256

    6ce2e6eb1ddaac6a0a6daff23603b03bf6733395fb006e16ebdfbc839d974d43

  • SHA512

    a63a958d53f3f7d87356afef0cafe8f18b37e53e0d99ff2c52b11ec39ad61db4c22ece44cb3c87f7ca00fa76e89040b42e38b06598d99eec2114d4d54469de02

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMc1qw:NABO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 016af99f51c1c8f182e2ac7b1952bd80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections