General

  • Target

    212e48cdb53c66bb2cd6f4c8ba4e4390N.exe

  • Size

    1.5MB

  • MD5

    212e48cdb53c66bb2cd6f4c8ba4e4390

  • SHA1

    f7056672dd0539b1c3f721c210fecda42443534a

  • SHA256

    18d6691f09fcb1e1f6e57cb51cbdec7a4958f0e984c02d1f9ec02e49d15d0638

  • SHA512

    9b655f285412e3c4c31226db1daf33172956b3fbc35124b32066c0646e7825f6d0b926d6fa0f42eb65227263c83edf802d378069b94a0f76c798be0ed93cdf1e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1dG+0JUx1p/Ps:knw9oUUEEDl37jcq4nP7khU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 212e48cdb53c66bb2cd6f4c8ba4e4390N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections