General

  • Target

    1958fa2049f1276a39e5d9fb470c5620.exe

  • Size

    1.3MB

  • MD5

    1958fa2049f1276a39e5d9fb470c5620

  • SHA1

    c1b9e27f62ea303daf2d80972f796a54161e886f

  • SHA256

    099ad6ba1c5aebc520c0d213dd6635db5474b1be8c069032f190056e9fff6f8d

  • SHA512

    82aac492d89688db18fe1d31a9cd790f8fdbca464cf63be8d5b824ba129a00d9fc67f4a4c6d09c7d6f1b3bdbac39e4c2e82e79ee518da970b7b0c728206e0432

  • SSDEEP

    24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv3OBC6BwDTKY924eR:BezaTF8FcNkNdfE0pZ9ozt4wISOmY92v

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1958fa2049f1276a39e5d9fb470c5620.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections