General

  • Target

    043a88de27238edbd88a58506e00e950N.exe

  • Size

    1.8MB

  • MD5

    043a88de27238edbd88a58506e00e950

  • SHA1

    ef3c06fcfaa339176c8d265e3d43bbfea1717de3

  • SHA256

    4fed69c2c930595294f0281650cd9a48263dfabc67d8345e41fd50e07f9e525d

  • SHA512

    27f292ee0ee04ba5dc4946026c9a3235d0221ff285c22fb2d63f1607bc95384d07521cd4b4a8de123f920bf7dd19604eea14091abed5355bdb155447a134da88

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7Ed7OEaMzsLOIfxy:knw9oUUEEDl37jcqMHd3+4j

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 043a88de27238edbd88a58506e00e950N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections