General

  • Target

    2f56c98ee40d59a76e7f307069a8c020N.exe

  • Size

    1.4MB

  • MD5

    2f56c98ee40d59a76e7f307069a8c020

  • SHA1

    256688d8743886f92686afb89812c0ba40cc8c79

  • SHA256

    e0a9ce8c21629d1c0eb2920348dff50c8850ae9d85af9900170d97f5c8d9204a

  • SHA512

    34b226ac8a582e7c275a7870ba28188426ca30fa3acd41694271a45887922257e2fa08f8069a74ed31e13b6b258b7c3976ca8bced86557e6aea1606bc62f7243

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zofjV6Cq1quuj:knw9oUUEEDl37jcq48iDuj

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f56c98ee40d59a76e7f307069a8c020N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections