General

  • Target

    4bf647ee9c809dfc309d7be0f0e64780.exe

  • Size

    1.4MB

  • MD5

    4bf647ee9c809dfc309d7be0f0e64780

  • SHA1

    511317e86d4ab51d4628939cd6d255c9dbc59b2b

  • SHA256

    fe7e8c86cb26bc755fd2f8e676f1086593fbd256dd0e543a6c68b06d36629b50

  • SHA512

    58fbedbc0f1700c28cb2f4a5afcd51265cb41acd33d1d3e4772fa08dd5da113956116099c5fc80f1b5502add728286aaa7ec970bb57c7401a20dfd501446a95b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCJZXGYyAC:knw9oUUEEDl37jcmWH8SKJhS3JM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bf647ee9c809dfc309d7be0f0e64780.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections