General

  • Target

    d8005bfcccff5c67223021d183b58220N.exe

  • Size

    1.9MB

  • MD5

    d8005bfcccff5c67223021d183b58220

  • SHA1

    68bc8a1dbc94dc56048b515c9915caa2efa0dbf4

  • SHA256

    8817c623e0435e6d82ab6ae45f5ee9d25bc355b69540767924d2d7e1cccf6fa4

  • SHA512

    c71ab1da8aab31538c47be6a0b73be9ae6c5e2f7d2aa806fb69dd4672e8a566ca0ee65afb81418ddc85cfd8a99e3e5e787d59ca6dcd56c5ac85f9ff417e3ef4f

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNI/TQ9f27dvapbkeyHdbKbTM:Lz071uv4BPMkFfdk2a2yKmkfHb/E74

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d8005bfcccff5c67223021d183b58220N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections