General

  • Target

    0bf5ecfb474de4e74ba653f2d7738420N.exe

  • Size

    785KB

  • MD5

    0bf5ecfb474de4e74ba653f2d7738420

  • SHA1

    40d341087541e71fbdcd4862f55eca729bc1b652

  • SHA256

    a909bac64833f2f668af68f2f81f55a092222d1dcaef94a79161d224385151ba

  • SHA512

    865120550dfa39d31d3ddbe7a4005ab8ea5635912702ca8d343d4cb40bdfc3b589a8f7e1886d2f5598d357ff2d58730a5020af83d125b09993315fea9a78a295

  • SSDEEP

    12288:ISe8XYl3vWD8xCi7KZoqkatMLrJB0lh5aILwtFPCfpzCDyc4MJuoVgha:RVIl/WDGCi7/qkat6Q5aILMCfpzRLa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bf5ecfb474de4e74ba653f2d7738420N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections