Overview

overview

10

Static

static

10

6a80468dbc...0N.exe

windows7-x64

10

6a80468dbc...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a80468dbcac79a8cd5f49d6d8ba7ea0N.exe

  • Size

    654KB

  • MD5

    6a80468dbcac79a8cd5f49d6d8ba7ea0

  • SHA1

    0162d0a844f01fbdc2ebd2de85d9f887ef01c747

  • SHA256

    116994db7ef383e2ce309bfd1739ccb1e51ebe3335fb66df517b95d29808675f

  • SHA512

    5594188222b33bdd28df132c93a1300f89024d12ee8ba7813177daedcebc94143b0d4e1e4581cf2e341aa6612f8b2047bfbc23cdd92a5fb87cf5c5eafd3d8264

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSp:fsJvQm7sK+/XrmNRlRZmSp

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a80468dbcac79a8cd5f49d6d8ba7ea0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections