General

  • Target

    b18c5893e976f9be8546fded60725f20N.exe

  • Size

    1.2MB

  • MD5

    b18c5893e976f9be8546fded60725f20

  • SHA1

    a6b597aa3c893d962745fc951100da37f970485a

  • SHA256

    41d735c63ee54d0f7b08bc4f6bab0dfe7d14b31dbe8e79b2ccecdc8dbaa37945

  • SHA512

    8161113840ac2cbcdf69829c4c8e631a9e97f5ffb5c6de5c3e0e0c66b207adf20bb9ca830eb7a80fef67a789b247b7f26560fe97b07e92df730f77534a2b8746

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcjRTs5JHHjDr:knw9oUUEEDlGUJ8Y9cGr

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b18c5893e976f9be8546fded60725f20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections