General

  • Target

    49f52e828697bac49bc0b0c70a255c60N.exe

  • Size

    1.6MB

  • MD5

    49f52e828697bac49bc0b0c70a255c60

  • SHA1

    2a5b4aa70fd07c8f112c114305698c5f3986be1a

  • SHA256

    fbc329f3af7226bcc198094acf39c0d12bbdd6843f4d5ab00fc2e6a941c4bf98

  • SHA512

    27d704876ad6d82ae37a4b79737909e27f58600ef01f6a1aab25070888c0c704bb24a6b89f4e4d0624d2366bf4dd9431cf577cda3e9090c02ce06838e0342f9a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiApn/ROmvGb+DiruWm6YvOVtqEt:knw9oUUEEDlGUrGiAlk54Y

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49f52e828697bac49bc0b0c70a255c60N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections