General

  • Target

    12e197c8d80b0dcb9a16e0f9fa497820N.exe

  • Size

    1.4MB

  • MD5

    12e197c8d80b0dcb9a16e0f9fa497820

  • SHA1

    632cb7d399452cbd49a94c7cc3c36daf1a37a00f

  • SHA256

    64687ca3e91c5af4ab115a07a6c7ce60d851aa22fd9d0c2f78309380aad40323

  • SHA512

    b995a9a1913d991a4f25fd77395740520ea423d673d905147d9c51f8d70451db40c27e2f590b98208ad15d43d183b99baed01d481c97d212f139421e6cc8e854

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOZ9Z8UfAAnlS9YlWTcTvJtQJ5YXtyRwIW3utEsJ:knw9oUUEEDlOl8AFlS6AaycwK3+Ei

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12e197c8d80b0dcb9a16e0f9fa497820N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections