General

  • Target

    89f29f78c8b2d4894d6f76c63951c680N.exe

  • Size

    1.2MB

  • MD5

    89f29f78c8b2d4894d6f76c63951c680

  • SHA1

    6f50a4b249ec7d79e7e1874e0bbdaeba259639b6

  • SHA256

    f09a7149cd6ebf288add3b09d9e8277b766b35e7a3a2ddc001db4b896a84f1d6

  • SHA512

    6f3876a3015d18a11cdd3c6b36406f4286b8aedf56499d14509ca17a02cdad80933132acf8b27e08ac9edb1492bfd40d7a77db499de8aa481e600be4b1e6c782

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7sNE6phFr56Ozq6gY71smJJnG3aGv:ROdWCCi7/raWMmSdp2P5v3P9saa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89f29f78c8b2d4894d6f76c63951c680N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections