General

  • Target

    4b5cfc26eb6e41da677d68c5a4956f20N.exe

  • Size

    1.5MB

  • MD5

    4b5cfc26eb6e41da677d68c5a4956f20

  • SHA1

    86f6ad7b1800fb9c0980236e929962e2325f7dbe

  • SHA256

    98a25ef11b88ef3b801e486a2931fcf72f6fd05ec1a7c47a2789a8c0ab4f8e2b

  • SHA512

    479273416b70adf1a8d1826f33e1a0b6cc12640fa46ba040ba58a3a7e39e3047a2dd5bf69c2c83cd67276769a239888633530b6348261908c124cf8bc04d9094

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcdSc0rpYGwpRFaqZ:knw9oUUEEDlGUJ8Y9cdOryv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b5cfc26eb6e41da677d68c5a4956f20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections