General

  • Target

    dea13e42eb1868dca91e4fb6c8b75080N.exe

  • Size

    2.1MB

  • MD5

    dea13e42eb1868dca91e4fb6c8b75080

  • SHA1

    643b6f3fae4a162121e1113441afc4c99938b3a1

  • SHA256

    9d76b89d87ee64745a49d637c5bbb5a12f904fa0651857fcdc95996ec57c728c

  • SHA512

    f5d5d0e6e7b86a0fcc8b28501c88ba438714c60a9ca3cc0ea5c9c1f15e3bae33ae5acd6f5b1f128ec07c45964919e6d4459ceab39aec016b83050ff2b8fcd5e6

  • SSDEEP

    49152:knw9oUUEEDlOuJc5cMKGPsPMHV9RE9bId:kQUEEy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dea13e42eb1868dca91e4fb6c8b75080N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections