General

  • Target

    ef8aa293fd6d49b0f97663ee697a33b0N.exe

  • Size

    1.9MB

  • MD5

    ef8aa293fd6d49b0f97663ee697a33b0

  • SHA1

    d30521422af110497dabb8a74a8fbb481f148fae

  • SHA256

    6228cc42d129c00a4526ff8952e524e181983c7ba39272756d9896a600b997e9

  • SHA512

    83c54d30bab3e6c06271748913f9668eb38c8a08da160f4768d19ccb39279185a18c37ce4364d2ee404cf617fbf8be5d51c31015f3c236c7728534a3b0bc8a48

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEd2hXnngk0cIC6Z29m:RWWBib356utgF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef8aa293fd6d49b0f97663ee697a33b0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections