General

  • Target

    36c49e38ea0972c84ffa2cb10ea04010N.exe

  • Size

    1.5MB

  • MD5

    36c49e38ea0972c84ffa2cb10ea04010

  • SHA1

    bde0d711f9e7dec6b117c6f9253573468c02362c

  • SHA256

    9b859365db955e9b458e0155fb7c5da6f9745fdaaefa6d390440aac3c2def405

  • SHA512

    53b540f0d19d1b3c28dfcb3f8d42d4abdd139ab9e81231466852fafa5eddde76a640138a9b8f3e5d637fedfb540d679889eace0e4ba1f5d846e59ace09096e16

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNgoZ1ssoxyV/c:knw9oUUEEDl37jcquVoVJjDNV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 36c49e38ea0972c84ffa2cb10ea04010N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections