General

  • Target

    ecff759147f358d96a4cc99976ff0f40N.exe

  • Size

    1.6MB

  • MD5

    ecff759147f358d96a4cc99976ff0f40

  • SHA1

    0bf156a452e43aa3c8d2ebb9aaf70be20360de13

  • SHA256

    ed3ea1578f5ec2d27f77cdc701b6272d1b0c1bc149229a0bd05db31b3b808b10

  • SHA512

    9bae567f661c12bae3c323551921614c29eb7676144e4f4b4f7ca32d97f992272f4f30945a3002baf57a33030b28ddebe6d03424eacddb6638d1d3ebd3ecbda0

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdPO8CERS9me9o8VNmyRp8Gdc:ROdWCCi7/rahW/zFdDlhw3XjD+

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ecff759147f358d96a4cc99976ff0f40N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections