General

  • Target

    485041c06b2594c7705f680749d8cc50N.exe

  • Size

    1.3MB

  • MD5

    485041c06b2594c7705f680749d8cc50

  • SHA1

    0049213670c97abb2741b0cec2047179e5d6f569

  • SHA256

    1e171139fa587ed19544091e49c20981caeb8ab46359db9f8b6dc178d23fd2fe

  • SHA512

    a2a3db6d70a6e183ea729d93ce17de572cd37600196f5c40f7d9c38878ea638c273ecd7a9a573c39798d0dc14fc2625c7fce28f565e68e622253a00f06db120d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCej5CnGJVeP9UU:knw9oUUEEDlGUrM5Cnke1UU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 485041c06b2594c7705f680749d8cc50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections