General

  • Target

    536de1208b5199d6287548207f4134f0N.exe

  • Size

    1.9MB

  • MD5

    536de1208b5199d6287548207f4134f0

  • SHA1

    2866f861e133d89a3e9e9bb03608731e1a512421

  • SHA256

    f9b4c3747a4414bff528eab5bc3010894955a87ed7bdfeaaae07795d89c28327

  • SHA512

    71d4400dcbe57d16ccb0f1d0e81ef62945f982192279665aad28a753f32c3c77d1ce7df144248057b73729900e4095a199b0e85a9e86c95b2426cf045349e7e7

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNI/TQ9f27dvapbkUmyJeBqFZ:Lz071uv4BPMkFfdk2a2yKmkUDeGPyG5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 536de1208b5199d6287548207f4134f0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections