General

  • Target

    36a31b6a157472544f3c200e60898a40N.exe

  • Size

    1.9MB

  • MD5

    36a31b6a157472544f3c200e60898a40

  • SHA1

    17aa5d85440b3e6f049aed6552ae4e04537fb979

  • SHA256

    8894ac11c1426dd0c71d690343892aee3bcbdd153be87973e4188178f222de6d

  • SHA512

    34017d88ac627dff5a5bd0be4eb0b1fa41de5c998d1511e250176875e8777a0ebf8d350967ab611c426d922124a90d241629591ac3c27e3498168f57f7343704

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VklYxKIh1:NABS

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 36a31b6a157472544f3c200e60898a40N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections