General

  • Target

    efc239c081eb667ae61049a480fd2b30N.exe

  • Size

    1.6MB

  • MD5

    efc239c081eb667ae61049a480fd2b30

  • SHA1

    d8184791e4b50eab35c76685ef50c5c36457f8b3

  • SHA256

    5b40e0818eed845a7a5dde6a2924f5f256d1408fe9351e0db78fe759876840a3

  • SHA512

    90c9afba0aa8a5d15b228787874cc710c38ef87541599d6e748d1220f8b9e4fe3d7c611da181bc47b49351fe9c49f4fe27a1d7a5d69fe73d09f4e69d06d69ef4

  • SSDEEP

    49152:ROdWCCi7/rahF3OioF5qdh2yV2R3ULz3J:RWWBibap

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • efc239c081eb667ae61049a480fd2b30N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections