General

  • Target

    b20cb8694a367530a6a8a6429df96410N.exe

  • Size

    1.7MB

  • MD5

    b20cb8694a367530a6a8a6429df96410

  • SHA1

    36e021dda2a112a75177d4fbe0ae41e0dd0b4a17

  • SHA256

    d90da51e915b3a23f2df10123564afdfb79222544cd646de9b231d7f1c99261b

  • SHA512

    c690eac5a1ec2c9bce11284e56a01168196df1b1b442688d1ba508ea0a37d8ea4f5e7d6c5cae8ebca61cc507a55155823159f9d4f68fd46c24ad5a12279bc152

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQb5P0DJ8aQHLMatkLYis6WF:knw9oUUEEDl37jcmWH/xbQJA9tudWWkD

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b20cb8694a367530a6a8a6429df96410N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections