General

  • Target

    6cd0ee9dfcdceea127a12208fb6363c0N.exe

  • Size

    1.8MB

  • MD5

    6cd0ee9dfcdceea127a12208fb6363c0

  • SHA1

    dd71b03a79c3c7434e3a48919235ff33be2e7120

  • SHA256

    b89589958fcd4d94e19272a23b238421157abc1ab27936348dc5593bfd964a4a

  • SHA512

    51347cd1316319ec8e5ff905de1b294ee698a79f1d7bb0c7628055abbae31b7a1a89f7a8d35687b69e1a5de5a82223f3b4dac546f20d9db89139804cb4b11961

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTZLVOaOxdy+EXc2kP0LO:RWWBibao

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cd0ee9dfcdceea127a12208fb6363c0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections