General

  • Target

    632a50031d2554f18eb98ec004505c50N.exe

  • Size

    1.8MB

  • MD5

    632a50031d2554f18eb98ec004505c50

  • SHA1

    c8faebb724add4d983fe388dc60ad10cf1dd1c4c

  • SHA256

    8e811938e8be75b453dc8c0bef24521580e80f6d413756626f07797bb0ae8981

  • SHA512

    7be07ee6a891e5bba8e373f76dc50f58c8ba1da5a2a1f677c5b8b35c10bc994b74fed638c9ad28b3bb0556bc4f4a63a981f170884a1869f963be12f51af57e75

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOAub7BTPfSwHhsfdjczAmW7+Gpqn:knw9oUUEEDlGUnwwA/BrbH6fJ7rE

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 632a50031d2554f18eb98ec004505c50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections