General

  • Target

    368b0249bcf14671224e1017914f6a50N.exe

  • Size

    1.4MB

  • MD5

    368b0249bcf14671224e1017914f6a50

  • SHA1

    3314cc8214b69f3b5c20b8f53296a30382449de7

  • SHA256

    2f91cd9140e9f28b8d6fa6cb84e6714d26cedb18ba6b121783bb70f68a51d54a

  • SHA512

    7b4822c137d55aa699b90dbacb5b214cea94917855ffb669f7cb076b36550ef3d615391917efaa4eb2d5b73d4a0acc61b1a64c7e20ed792bbfc0dfba1aa9b107

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbfCuZ5NnK:Lz071uv4BPMkHC0IlnASEx/mCuZ5xK

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 368b0249bcf14671224e1017914f6a50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections