General

  • Target

    48ce02016071548be89873e14db6d060N.exe

  • Size

    1.6MB

  • MD5

    48ce02016071548be89873e14db6d060

  • SHA1

    c43f42e90ba5551478ab67802c54f1707ac6736a

  • SHA256

    6202359ef534c7948096f9ca9a6a51c20c7fa718ddee48b4830d8b0cc6410b78

  • SHA512

    2c21aef193c579d8837687d2dc6676ad09738bd1b8ff1af139a19c80041eba9d4570b9073de02f4cb00f1c1b0e659c5e74d85d03f44808ff43b878ad80e6d061

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVZ12UzNsiA+qzR24uk:knw9oUUEEDl37jcq4QXD7z3QRCk

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48ce02016071548be89873e14db6d060N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections