General

  • Target

    1f0db0a6a88c61112f9cbe923f20a480N.exe

  • Size

    1.6MB

  • MD5

    1f0db0a6a88c61112f9cbe923f20a480

  • SHA1

    ad9110e00e41582371447db5b50d62a1d7cd4122

  • SHA256

    93264159380224d4d418f16b8ca7180de876cf85e5adffd717655f618b832654

  • SHA512

    3438eba0bca92c32d497ddf9beddd1e5333a735f3f4ae304831e24b2528efac7583327e1789164a63dab4eb3f9fea7eda0cc94c3fc89cf3e23369f34790a55ac

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5EAR24Gm/rfjc40c1:NAB8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f0db0a6a88c61112f9cbe923f20a480N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections