General

  • Target

    1f5a3702b9329eb93eb34e966cb38220N.exe

  • Size

    1.5MB

  • MD5

    1f5a3702b9329eb93eb34e966cb38220

  • SHA1

    29c44a95f7b08e7e6d8879c03534753e69012ac5

  • SHA256

    caa041ddc1e1a3ce01f6b2a1a8e7a6b23b336f931bba9ab56fb6ab9489b6473c

  • SHA512

    2d4074dfe6d3cce067949b2e957a2c350a82b3830cff799daaf3674883f85f66d351fec63961a2df6e00b357b809764ceed54a7100b779f12db7c3e79755477e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1dG+0JUx1p/DKMV:knw9oUUEEDl37jcq4nP7khZV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f5a3702b9329eb93eb34e966cb38220N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections