General

  • Target

    0ea6941d8f0665f522babd924acf6390N.exe

  • Size

    1.2MB

  • MD5

    0ea6941d8f0665f522babd924acf6390

  • SHA1

    44a6cd6218c8daa13d9391cd1e0820136c8691ba

  • SHA256

    37497ad308877db40c3c85f15c830f11416b4c4221104e5eabae6244c6049ae9

  • SHA512

    a5ff947f564d8d255a6664cbcc658d73e829ca30d111fb329c9b6a564b28eaecc265042d3e1127b8f36bac81c10a68d1ce13b7efb4edaea8238468a5019c9d39

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARvKYYtJh8DXmB4thd9jRI5QW8N:ROdWCCi7/raZ5aIwC+A8JhuRzL

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ea6941d8f0665f522babd924acf6390N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections