General

  • Target

    ddab8b8df173232a87a2413112ebad00N.exe

  • Size

    1.3MB

  • MD5

    ddab8b8df173232a87a2413112ebad00

  • SHA1

    fa3612472133d7c532c49cf6fbd27e443ae8da9e

  • SHA256

    c1f63909e589568a3473c8d86e8f6cd203e5be23441b0f7182ebb80a7daac27e

  • SHA512

    1575f0ed5ff96dbfec84abd543b589fa22f6fc4456195f33d679699786f2c05a15c8047a80d4d57bc8b1f004ec469479890696ac87b3aa566ad77f3b3f1cfc1b

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0b5jQanRVc:ROdWCCi7/raWMmSdtW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ddab8b8df173232a87a2413112ebad00N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections