General

  • Target

    cfa824399cd9124f26005a5628112150N.exe

  • Size

    1.1MB

  • MD5

    cfa824399cd9124f26005a5628112150

  • SHA1

    0b54f21d6ea67558940e97385df0ed6e981dcb33

  • SHA256

    fb7be0ce37f0963b6ab0a6865326825beb6d30bea78717bb6820350273a6e849

  • SHA512

    20d154ca9c7c6de4e8d793ac7eda83b78117872663e3f0a399212ee46dff8e1d3b2c03076d9e7a84e7a9ba53590a9e72cc441c6102cc3b0d1205936b54d37553

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8bodJjlzrqiXda:knw9oUUEEDlOuJPHjlz+i4

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cfa824399cd9124f26005a5628112150N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections