General

  • Target

    4654497aa81c6e38c12a000d28457220N.exe

  • Size

    1.9MB

  • MD5

    4654497aa81c6e38c12a000d28457220

  • SHA1

    eeeea003c6ce43e01e9a8b8ddad09a5cfa2869bf

  • SHA256

    98504acfd5daae25539a35bbfc9bdbb16349068cd10b939642871fe4c7dfd50f

  • SHA512

    4e7ae4b30bd5cf93c505b76757160327199b4cd8f593bb13336317aa03308e1139e46f233211278518f39081da19aa33a6740569989318f6ca18e27122403e2e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejHeOuU4GrTsO20J1nycsW5mJgNP9Gfpc/I:knw9oUUEEDlGUrMsWfb1/yCc8G1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4654497aa81c6e38c12a000d28457220N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections