General

  • Target

    70e96278e0fb49990c84c82d39aa1440N.exe

  • Size

    2.0MB

  • MD5

    70e96278e0fb49990c84c82d39aa1440

  • SHA1

    58025d822a62ce3b8e764dd70370de2dd04dbc1c

  • SHA256

    736385daa8e8422e7ff7e868da87e19050ebdd185b88d092dad667a70fbdec59

  • SHA512

    fbcdeae9b5ba0ce913027d54fccc44409837d4e43e9f68e7bb5649c2402a98397dcc011212dd327d751758ed474bfc1caa0197722f6d58e38b817d23d6a3b223

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDxwkv:knw9oUUEEDlGUJ8Y9ctYVk68NdzqhTG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 70e96278e0fb49990c84c82d39aa1440N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections