General

  • Target

    5ce168f9ea7b613ab05d86c70c30b540N.exe

  • Size

    985KB

  • MD5

    5ce168f9ea7b613ab05d86c70c30b540

  • SHA1

    89931e49d5fd34d62ddef94a48ba621a1816e4c3

  • SHA256

    2027f1499df0abc142f76ce3a5f3d82e44023182cd76a6f02090c4bc290d6365

  • SHA512

    091ac07a3a4c15a0415852561392b4794834a902b4a7a026dbdb5f5af2318a3927ec67e98e698c123fd17e5fcf6cf674600ac038e5718337d0190c3141b1f53a

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3RMC711S9PaAdL3Hkah:JanwhSe11QSONCpGJCjETPlGC78Xtf/h

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ce168f9ea7b613ab05d86c70c30b540N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections