General

  • Target

    ce97ceba8099a60a6de4496403b83900N.exe

  • Size

    1.5MB

  • MD5

    ce97ceba8099a60a6de4496403b83900

  • SHA1

    4d2835bc31c5129420592a2513e50091cd4e8b68

  • SHA256

    17c33bf26407a66fbb2edbe1e0b239afe15eb9e49e062265bb851940f6bf0511

  • SHA512

    8bef6cad2290b3b17db1ec0bcdbd891d1c91c8e9c9fb0d4004515681630e47322dc3ba8fe380b5d19fda84072a26754c4606d724cd74b874b11287d30355d506

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Oi8T1l4YLk1o2bPmwbGrFZ7p2Ydbf/FIunq+PALN:ROdWCCi7/ralHs1PTma87Xxy5Z

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ce97ceba8099a60a6de4496403b83900N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections