General

  • Target

    cf9f87ba1f94f89e00ea7dc3424c733202894a4d1e23f27e4ed073a1f3a7bff9

  • Size

    1.6MB

  • MD5

    43de8404d91d2a1a41574994d7d68d05

  • SHA1

    5abf865bfe529b43c939fc1ed8d5c2f4a15bd441

  • SHA256

    cf9f87ba1f94f89e00ea7dc3424c733202894a4d1e23f27e4ed073a1f3a7bff9

  • SHA512

    79c380e379526349ded404b0eeec5c9d599f398cc0d7c9f75d3907911045a5ba395da63c6baad066ee3dcffa17fdcb19db0e6e270649ed6908d8f161a4d0f3bc

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFo5bUt0lhkr:knw9oUUEEDl+xTMS8Tg3avLoZC

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cf9f87ba1f94f89e00ea7dc3424c733202894a4d1e23f27e4ed073a1f3a7bff9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections