General

  • Target

    382a6363f208fdae0da4dc4254f95f50N.exe

  • Size

    2.1MB

  • MD5

    382a6363f208fdae0da4dc4254f95f50

  • SHA1

    5299d2a427de520a5c77d1cf1575ad7507c0b1be

  • SHA256

    4c19f1d3d74f83e7511f2b434cb8299c0974d6e9cb833082577d4123d476d18f

  • SHA512

    18bbbc6082b6291600438ebbff63ece8ac7ca1bbaf3b28bba2de0be39590406550d855f5a2af7e63e474d97cbe434ba08bcef0375b51a2e299e9c90121874152

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHaf23u:NABa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 382a6363f208fdae0da4dc4254f95f50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections