General

  • Target

    1e8cf225d7a9e3c9ab7a297980410220N.exe

  • Size

    1.8MB

  • MD5

    1e8cf225d7a9e3c9ab7a297980410220

  • SHA1

    e4b43e2cc087b88489f84775cd395d37b907a625

  • SHA256

    6cbcedfba04f3ee19c4875cf5e81485d0b78b52c91fffecad83b50b1810c9af4

  • SHA512

    2217695d3d1fe0bf7c70a15cddbd917ff78de1fda5fb6a50ed782946dcd585bdfc7cf71ddb6be4ae7bb4de4ee4e5f85d0bfa6d2eab7fdf327a936ed99adf0c14

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWi:ROdWCCi7/raU56uL3pgrCEdMKPFoJgD1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e8cf225d7a9e3c9ab7a297980410220N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections