General

  • Target

    ffa31c8c2e3985e1217050554f708d20N.exe

  • Size

    1.9MB

  • MD5

    ffa31c8c2e3985e1217050554f708d20

  • SHA1

    2756acb637318d928215df67bd1afbb881ede6bc

  • SHA256

    5491ae0b2027b8d9d75490dd40054a359c85d375818047f58a112674e365ef88

  • SHA512

    8ae24319e62cafd3277d00cf571c04ebfa01498103f1d589deb3d0b1295b2dd52c4dd9ba85ad594307859d0346f94555f4be77dfb191e630070e7f15701aa922

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOGApwJbxgU67tqSNP3l50l6ec:knw9oUUEEDlGUh+hNGTbu5bmNM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ffa31c8c2e3985e1217050554f708d20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections