General

  • Target

    642da5afa7e16d752e638aa83a29db90N.exe

  • Size

    911KB

  • MD5

    642da5afa7e16d752e638aa83a29db90

  • SHA1

    db4db3f5a64711e5701573e5734f143355c63f08

  • SHA256

    4c0a5508295c1079379fe1cb577e721e0fa7b853377432e97227af9c28898819

  • SHA512

    bc24a88290a00bfdd9eeceecb8092dccc3d5db11dbf53803c5fd60a3b59ff9caba06d4fe5da121d291ce3dd609608ad95499c41726e4f7120b133f5e089be79f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF672E55I6PFw12TJ1tmyNJe7BFV0NO:ROdWCCi7/rahF3OioM5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 642da5afa7e16d752e638aa83a29db90N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections