General

  • Target

    1c956010f0faf6bb8583467bcfaa4eb0N.exe

  • Size

    840KB

  • MD5

    1c956010f0faf6bb8583467bcfaa4eb0

  • SHA1

    d5ce5bd2d221f997e8a7a7518afa0e194864ef6b

  • SHA256

    5b792cb3f8db6eb64605a39063a8a1d8de30d2131e09ca2f0a084093ae1876a9

  • SHA512

    b770e17fafd8f576a5e692aed52e5c8688c40bfda7748bb12e676b35fff946665e480803bf33cda2f48aa4ac1eeb52e30afdea26ef00164c25c709a98c2186f6

  • SSDEEP

    12288:Wlek7VIjqS/AttnfMznf81aW56jmi4EAEKw46Ye/WOw6iuex082+ueN3RGq:cfKE8WHEm6Yjjduex082+VNhF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c956010f0faf6bb8583467bcfaa4eb0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • .rsrc/1033/GROUP_ICON/101
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/MANIFEST/1
    .xml
  • .rsrc/1033/version.txt
  • UPX1
  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections