General

  • Target

    ca97edd382f399ad5d3eb2a1b7be5950N.exe

  • Size

    1.3MB

  • MD5

    ca97edd382f399ad5d3eb2a1b7be5950

  • SHA1

    486cfab5f41297e8d7a1e08bf9ff4cde80c5440c

  • SHA256

    00b63e2ebe26aaf09c45713d0f63307ba2387ade1ee3db15055b39073345ab35

  • SHA512

    9b0cd627096241bdfa06e50ed07db5d89dd34a2d6c025b22a4e22ff139ce1a28969af13dc118b8937f958437345128ba6ba2a256346eb63387103c45cdce98a5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI153gII/3OSJi9LN:knw9oUUEEDl37jcq4nPeyNiD

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ca97edd382f399ad5d3eb2a1b7be5950N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections