General

  • Target

    ad36992bb74a731204bdeed6da475a30N.exe

  • Size

    1.8MB

  • MD5

    ad36992bb74a731204bdeed6da475a30

  • SHA1

    aab85d12e00d919087aa6e2d4dd6a65a5ea26b66

  • SHA256

    a5a0fa55baff5d3be943762d767896070954e89c09c0e4b9352c61f0be44df44

  • SHA512

    895c19baedd9c34bab4961cd89289cd1f962ba7a39a584cebd5bbebe4bc7d51c4e8b868faacd1638581464ce1960bbcd579f84c82b7f070988a892a51b061c81

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Ropm6eTxC1UyRWtb0dfM4+F+OJ9WYYR2Vfg:knw9oUUEEDlOuJzyR7pO3e1obBs

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ad36992bb74a731204bdeed6da475a30N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections