General

  • Target

    f2512758b0c06994344772d16b53d490N.exe

  • Size

    1.7MB

  • MD5

    f2512758b0c06994344772d16b53d490

  • SHA1

    e7449fc6e57b92c3e4c1565d91361e691fb41e04

  • SHA256

    275a56974dc7edfcc589857e983f71f7187119bf7696613fa425071b06d38b99

  • SHA512

    0593071d22cad9dd682ce8b15e632ee7399e8eac88b7a8b4b171dd5b36f1470cfc811b6832b285a13150747521a250d65f531abc9251bcb730e566ef4eff53c5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwdjWPwQcyHm3F9jjpENkk+wS3ZseNFKpZMQ:knw9oUUEEDlndy/chgkVTpsuiSM1P5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f2512758b0c06994344772d16b53d490N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections