General

  • Target

    efd44d3ac20fc0ca9dc38244b94fc900N.exe

  • Size

    1.6MB

  • MD5

    efd44d3ac20fc0ca9dc38244b94fc900

  • SHA1

    828cda4198d12d3deae8ff237a55dbd2686e8ec3

  • SHA256

    a734c9abf69bd6a126d8d05d7280e25e5a25ba9ebd40844f166cff11837a89d1

  • SHA512

    453aac3a9895a87af11c2aa74d6b7a0e0b2651b824a92212f4c434e1afd8ddc05c498ad81c96d771edcf0ec5eb624b9da86fa8e6f78908786bad947513020bd9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOAub7BTPfSwHhsfdjczAh486Yh7:knw9oUUEEDlGUnwwA/BrbH6fJ7h6W

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • efd44d3ac20fc0ca9dc38244b94fc900N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections