General

  • Target

    4a1fcdd64831808c5bdde59d88157b40N.exe

  • Size

    1.4MB

  • MD5

    4a1fcdd64831808c5bdde59d88157b40

  • SHA1

    9d9988a6e2f6aadacd97cb403bce1f7a67361188

  • SHA256

    ce230ea9af16ac88593ef3752f025f2580abc98eeec42d72471f0ae502961230

  • SHA512

    8c0fff24b27ef8cc3f40eeacf2a97d4d54eeede588121f7f7a78e02fb980337ae8c21f59b27f76bf864cb46ccadb0b514cf760f97fe9d000db2cd5ebacf7e343

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DX+qtrt:ROdWCCi7/raU56uL3pgrCEdM/Gta7rim

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a1fcdd64831808c5bdde59d88157b40N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections