General

  • Target

    aff819879ad6067d0e973a53524264d0N.exe

  • Size

    1.8MB

  • MD5

    aff819879ad6067d0e973a53524264d0

  • SHA1

    2e71f93c209a49e4896386f87f56c411aae6c429

  • SHA256

    597d14cfc0b411413fa308754782a827af395282ce558898225d7f79d9a46912

  • SHA512

    2a039d75e3f930d45c039b6e14429f7419f2c70e11fa9d0a52ab2873980d88a98ef779fa654cf0b456f3e93b9f3955342aa1fee89bba13eb84f8879d91c4c72f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcW5:ROdWCCi7/raU56uL3pgrCEdMKPFoJg8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aff819879ad6067d0e973a53524264d0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections