General

  • Target

    881b1a383eab14f59e6a575fc3f9a920N.exe

  • Size

    1.8MB

  • MD5

    881b1a383eab14f59e6a575fc3f9a920

  • SHA1

    9f6b55230562daa9c04ac4976717223834310e1c

  • SHA256

    8880f6fd3405dcd9c073b27d04ac169d58deea9788f05b72ad197aee7884c5f6

  • SHA512

    3056a49ab32b4e27369bfcae60a69dade06de647ea8b63cef014cbeab62841099c15ff9c42a138fce60026d5ee08a8002fa5aca13decaf1d31e9f46a642f2a66

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7Ed7OEaMzsLOIfxj:knw9oUUEEDl37jcqMHd3+7

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 881b1a383eab14f59e6a575fc3f9a920N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections