General

  • Target

    326494b8c86e0df8062da13056f7dd70N.exe

  • Size

    1.8MB

  • MD5

    326494b8c86e0df8062da13056f7dd70

  • SHA1

    a3c01b0d9127adff1ea9341b8a7acc9221b9918b

  • SHA256

    761533e9faab93e7138d689171650f3b334391cffaf93319fe191bc4b6c9885b

  • SHA512

    c6a9aed0aac2194527d2be68cb90b7abba02a82735d846dc2365a04249f4de4c873531238292724b4f2a6c13d2a3491852ff0f48459a0ffa3c5ad1443a26074f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1W/yXK09PK89hHq4CYLom6OO9DwdVnKDmSG:ROdWCCi7/rahwNGyX687xWHMTnoNkB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 326494b8c86e0df8062da13056f7dd70N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections