General

  • Target

    db2016a13be135d5060bad9b31b42900N.exe

  • Size

    1.5MB

  • MD5

    db2016a13be135d5060bad9b31b42900

  • SHA1

    a2b2ae990eaaa9819a6a92fe2a2a6e94f8f9e759

  • SHA256

    7cc270e90047970221c917fdbe50d5553af0ed8f6870131a5eb9d3734451fe74

  • SHA512

    7fdaf514d0fe24b72d740a88063e7f575073ee5a20c6794a162b9fe71ff0ef56282b149981906322cd292b2002c83aae5ca2f9558096b82a6d729e5400da5ef7

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0b5jQanBCvzVrqSz6K3:ROdWCCi7/raWMmSdcv9

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db2016a13be135d5060bad9b31b42900N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections