General

  • Target

    3643a96f11c309a0a1d7e60b2c035060N.exe

  • Size

    1.4MB

  • MD5

    3643a96f11c309a0a1d7e60b2c035060

  • SHA1

    cb74c43c86ba682e5495fff625e25d33b60e9c76

  • SHA256

    ab51763e9c674e31daff48fc58f544d734412a9df7da62c1575667081e13d0e9

  • SHA512

    346bbc7e14d6b6aca695a8b7f705575ecbfc18ce4fd58db99b6c482d758d1825aa0ff3c6d27b507db4397b66aee5df4e8a1592ecae12e3e8710f401fcec0c901

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6OBC6y90Xli7V3kPitbcdkgo6m68BBbcIT051tycMHKZmnG6:ROdWCCi7/ra7K9Ncml5g4KMG6

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3643a96f11c309a0a1d7e60b2c035060N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections