General

  • Target

    656971de3d128ae19cc5e50dd3285a50N.exe

  • Size

    1.2MB

  • MD5

    656971de3d128ae19cc5e50dd3285a50

  • SHA1

    9297b34061206e0500fd19a3fe3a6652dd6bf706

  • SHA256

    153d0dc72a1cead78bdd7da6eda6a21a344c8552d6d3e6f600debb50e74d5ad1

  • SHA512

    a20bb8ebf1492e2d44360d3e88a27bb973e9035d7072e430fa99635e817d75059d1f1ae8f59e0e233b8f661fe1422550bd4fbda8b55d5dcf9316b438af83d61e

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2/yJhrhScDtxF7m2D6:ROdWCCi7/raWf7L6

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 656971de3d128ae19cc5e50dd3285a50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections