General

  • Target

    98bca393dd36fc269bbcb96f6387a200N.exe

  • Size

    1.4MB

  • MD5

    98bca393dd36fc269bbcb96f6387a200

  • SHA1

    a712c9863ab5b8d8fcfcd2cf22e57d9707120e40

  • SHA256

    80a9a914055ea02835debbfc0f77b8ec0b87a408eba41e7ae98f1fba2c847ebd

  • SHA512

    ead5bfbc88f00d6eb71c6eb140b9c4b56282bc5f6d42277407d666b2ee2fb84a4ab5004636692b76132d6c279aa8de7fd7b91534e04f4490a69358950ff18a90

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzAf3ZuHrQOs:knw9oUUEEDl37jcqDrUS1ZaQP

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 98bca393dd36fc269bbcb96f6387a200N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections