General

  • Target

    d1e7fbabcd715c6dd4e23089ea38a3b53d24f9692f6a80d3942c56fcb760d9e8

  • Size

    1.0MB

  • MD5

    b9a4b3d17fbcc2533ed95c97ce084352

  • SHA1

    f4fbeedbe68cc93d278993c2e3fea80671a1c694

  • SHA256

    d1e7fbabcd715c6dd4e23089ea38a3b53d24f9692f6a80d3942c56fcb760d9e8

  • SHA512

    a742ee7e3ea4a9c08dca3b68fdc60cd6078b8ebcdd9e916ed1208f9de2ffc7bf26b8ecadbd3aee5238911ddcb2e1dd89f4afcda97ad9dd604b37309090f1ccf3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/6bc7F+TgW1:knw9oUUEEDl37jcmWXbogg

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d1e7fbabcd715c6dd4e23089ea38a3b53d24f9692f6a80d3942c56fcb760d9e8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections