General

  • Target

    3bb1c485dfe98b9f2508b96885dd1050N.exe

  • Size

    1.3MB

  • MD5

    3bb1c485dfe98b9f2508b96885dd1050

  • SHA1

    f740e351901cc00a02b6ee4dc9ec16d3d128d2dc

  • SHA256

    1c0a15c1f6061dc77235bb002b749b41c18f204c747aabb0108e4391e725d1be

  • SHA512

    4b3fbd64f9c2e5222bd1192068c9c096837649573890eb8b5535925879c5220ea33a2f7dc2522233540f627efd47aa29d9dbf344fdd29ac71cad232bb73b701f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1W/yXHLtGlCetIbn4SZwx1mxORuJ:ROdWCCi7/rahwNGyXGCeq2UARO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bb1c485dfe98b9f2508b96885dd1050N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections