General

  • Target

    3cf04bab1a6eb67a8317a980c63c5570N.exe

  • Size

    747KB

  • MD5

    3cf04bab1a6eb67a8317a980c63c5570

  • SHA1

    e2d23d53ec22f473e2e2adbef78c1dd0888b1148

  • SHA256

    a42fe0c84ed61e53f9bbfafb1dcca34a7981cffff2c52c6973eb9a895dd84c64

  • SHA512

    83a10e3324602ec938013b888008cdc364d6d8db91814416db93edc33a40057b61fcfa5b19e9202a18f537dcfb41da85d858ca9bcfa31699e92d936638f9a86d

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3Rqza72Pz3mV7Rzbj6B:JanwhSe11QSONCpGJCjETPlia+zW9zyB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3cf04bab1a6eb67a8317a980c63c5570N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections