General

  • Target

    1b4941c4149883a368134f9b706a9d80N.exe

  • Size

    1.7MB

  • MD5

    1b4941c4149883a368134f9b706a9d80

  • SHA1

    e6f92957d395e62a58f0efcc238c1c3ce697a56d

  • SHA256

    da004259273461dbe99c7c914f223b59ec641f5738c920732dfeb6105ff947fa

  • SHA512

    35db00f5dd5867e60845c9001b6f6bf56f6cf00ebe739e77c1339ed896b8662a6184cb564ea2c915b710440669583cf75aa094b952a2df9757096390a4a4edc1

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOZ9ZReBCs1VcvGYcgo04aG2c/+8Xg0FWdXGFSfWET:knw9oUUEEDlOlR1dqgPgKtu6a+

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b4941c4149883a368134f9b706a9d80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections