General

  • Target

    64a2e0912e403921d72af4e3fc7fb580N.exe

  • Size

    1.9MB

  • MD5

    64a2e0912e403921d72af4e3fc7fb580

  • SHA1

    4c7d23b9b205b171296067cfcb71483861ea69f7

  • SHA256

    ca2299d3da03aa5f4cdc1616dac56ac5f6589f0500dbffbbc65b48832c0d0cdc

  • SHA512

    8e9d6b895eec3d7c73ab58dd5602e69cf90a3dcf34ae9d0c08a8cfe353465ab61d68a09fccea388844c364399d2f547ea659c9959dae70acafd3c8a2dde627ce

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWQ59U4WyjxaAcjuDXyZe3P2dY4EV:knw9oUUEEDl37jcq4QJ7tW032vc

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 64a2e0912e403921d72af4e3fc7fb580N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections