General

  • Target

    48b0aff73887e6c308976a30cc140d90N.exe

  • Size

    1.7MB

  • MD5

    48b0aff73887e6c308976a30cc140d90

  • SHA1

    a1e18be1a593b2791ed8cf617697e700595b5359

  • SHA256

    f9b70f08d5e4dc4c045a56082b52d420b16f3d60d0e022e046a99e497d7e9d37

  • SHA512

    39273dbd6913640ba514154c1934fa14688db6debe7ffcb0187905750c955548caa84d3b83a48f599ad3098a9dc0d0373f96f1d6ce9ed724c6c47f7b60234e13

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1vAq3GupoFqtXTHthMULsyk:knw9oUUEEDl37jcq4nPgFWuSmjNrrk

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48b0aff73887e6c308976a30cc140d90N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections