General

  • Target

    14025e2d1705f0db5870800fe6f7c620N.exe

  • Size

    1.5MB

  • MD5

    14025e2d1705f0db5870800fe6f7c620

  • SHA1

    35be11fd408524bb75458afce5cb33343c7fa8b1

  • SHA256

    7909f605e8504eb0dea13b23972301e32b67bd3c9f4089a815cc3aa9931d8259

  • SHA512

    1296561cf8bc1a6f9fa24d513d183ecb142db5fed6a8331c27fd62b5d2477dc1c7728f2f3bc5c21e0cd6fc7bd76ec52e71f012a8d9000f240c20ddb56ad5a087

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgOZ/6kqCCg70:knw9oUUEEDlGUh+hNskqCCgI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 14025e2d1705f0db5870800fe6f7c620N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections