General

  • Target

    d0d428c2e2cedbc880a998c9f835a960N.exe

  • Size

    1.3MB

  • MD5

    d0d428c2e2cedbc880a998c9f835a960

  • SHA1

    2a432abd5e347e72ee42bf80fc9e4d5a94584b7c

  • SHA256

    371b7b1965f54ac77b635d43a1f9a23e3b605c4887793f2374f60b800b9f6c09

  • SHA512

    51df4a71086bed5b6ef4f71ae48c0df936e782abfd338652cb8727878bb457e53ed3965e55cafc28eb459cf9fbc7dc781c44dcdc65a54babab8865f2bf4f849b

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMabODEbs:ROdWCCi7/raU56uL3pgrCEd22

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d0d428c2e2cedbc880a998c9f835a960N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections