General

  • Target

    d991d0769fe68d797058dab0b989f880N.exe

  • Size

    1.9MB

  • MD5

    d991d0769fe68d797058dab0b989f880

  • SHA1

    fbe21002154392c54cdd86a5cb07f1cb98e6a841

  • SHA256

    ab21e61f82f0005902c08f5e9dc10a5a0b3528029ea0ac11bca0ee1a83b01223

  • SHA512

    9bf32e2eed913bbe28cded3e38d91adb5ad384b595d1bf22033f042e5c57504ab80919d8c259f31224eaaf2ed859c2af1007c41e43757940de06ab05729ca68f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3+Aj7W5YTxl3:knw9oUUEEDlGUJ8Y9c87Meh9xl0g9sqF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d991d0769fe68d797058dab0b989f880N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections