General

  • Target

    24d5f827aaa16a613e9526a798fcf390N.exe

  • Size

    1.2MB

  • MD5

    24d5f827aaa16a613e9526a798fcf390

  • SHA1

    3e6cb1d6c6d8d3f70ed4e8c59bc0dbc214666e73

  • SHA256

    e68e9da40c2a2865d1401e6116a42755077bae265a0f4f885273161554093eec

  • SHA512

    e8d72b0f3bfe4d6bd11f3ca32d749794b182a0de6fd5a7750f64e521ac3a2e7b0974a78ce1c77506b07b113c285621a96808e3bb0a9888e2c0dddbbb13d5f45d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbXIjeO:knw9oUUEEDl37jcmWH/xbxO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 24d5f827aaa16a613e9526a798fcf390N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections