General

  • Target

    28063d6b32820408cd13f60a13b8d3a0N.exe

  • Size

    1.2MB

  • MD5

    28063d6b32820408cd13f60a13b8d3a0

  • SHA1

    0b2f1ce0bf0fa76d90f5b5c1cc288710da50b9bd

  • SHA256

    ead815bbeabc824205dfb6ea55a5021dfb6975d06ab63fe66e0f7d3a1ef1db47

  • SHA512

    eeab02b6fde627e8528db6cf7e7088fca880bee37fc9905a8326f0adc16319876b0cb255318e15a09765729b3df4dfc6dd391d4913e0feaee133b9ebe53c8419

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7sNE6phFr56Ozq6gY71s+Kf:ROdWCCi7/raWMmSdp2P5v3Pa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28063d6b32820408cd13f60a13b8d3a0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections