General

  • Target

    52ae960df74803cccc3f78e86e3a6820N.exe

  • Size

    1.7MB

  • MD5

    52ae960df74803cccc3f78e86e3a6820

  • SHA1

    0d8fa9c7599b538e5c1b5d71d379a5fa8933ede5

  • SHA256

    26db95f24a2cfdfdc8ad94c8754b9a0249d5ba31651935ebd43b20bc2df1d6c2

  • SHA512

    e1dbebb2f49f8ce4686e1471bc7eb1d9b4fe35f34ee14328006406fc620100ab49524c2020f3d327292fdd2ecbfd25abc0f4ed35a692991cdbb890c3c84ec136

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3+zc6qK8EyF:knw9oUUEEDlGUJ8Y9c87MeNtKbyF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52ae960df74803cccc3f78e86e3a6820N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections