General

  • Target

    49b2b8c4dee3a887473e5369f80128d0N.exe

  • Size

    1.5MB

  • MD5

    49b2b8c4dee3a887473e5369f80128d0

  • SHA1

    a054dcb685c2f3b8c4eb677ef1204829ea3a722b

  • SHA256

    a5510764389028162f09f675f8ba8f5135b96f767f1b4a7037f78aec86229de4

  • SHA512

    95070a3c8276385e397e1b23979b845afbbe4053e31ef4e8c0016228ea9f8d18eadd6ba31c4c846774c30857d247d557777c9227d79a80d0d38b7ad53888a244

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqdt3/mbq+KYUQtGbzhNBUZne:knw9oUUEEDl37jcqdt3uB31e

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49b2b8c4dee3a887473e5369f80128d0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections