General

  • Target

    cef878c47205af9ad49b58a938f36580N.exe

  • Size

    1.9MB

  • MD5

    cef878c47205af9ad49b58a938f36580

  • SHA1

    d0814639ef872066450ca41ab3a995868e05b670

  • SHA256

    63869b03a89537680a138891bd40c96d22c557a18d42d26825b10e0b6deb1f69

  • SHA512

    04a1bce5e9099213d0e78dd015be682d0b7ca2978eede6e2b915163e05dc2537d58b4e35f4b9f86d8d43210b4a9c86e54d77460d9376851dbac5a09d911996b5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWQ59U4WyjxaAcjuDXyZe3P2dY4Ex:knw9oUUEEDl37jcq4QJ7tW032vo

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cef878c47205af9ad49b58a938f36580N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections