General

  • Target

    497204476cf3d73482ffb8196d336480N.exe

  • Size

    1.4MB

  • MD5

    497204476cf3d73482ffb8196d336480

  • SHA1

    b94b4b2a0cd849c0fe9f928400accbe96e202b48

  • SHA256

    4c4364980dcad3e7a4a0b38e460983224575db325c05e17aa33deb4f4125b5b6

  • SHA512

    1cd3a54052520898a8c861918183ac0d32c6e20410e4b67014e70b3441354a0106c88eeb31db47c6a82dda8d176e009c87afea173d7eb3f0faef187796c617d9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURIGWjdgZZB:knw9oUUEEDlGUJ8Y9ctYVk3jdIZB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 497204476cf3d73482ffb8196d336480N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections