General

  • Target

    799cba011ea00f893698a46a3f360260N.exe

  • Size

    1.3MB

  • MD5

    799cba011ea00f893698a46a3f360260

  • SHA1

    366bad60cddea20f9528d228ceb87ae5fda0df45

  • SHA256

    86fe2054f49023d650e9f68c6ee69923d2e10ec8d058a38cdff74cf660c364e4

  • SHA512

    7d1649fe6b9fd6b4e445048f07a478c9102143480088d3d2d48cde0c0acd6a0a42c91332e5f0184783cfe44b3c03a9128dd1afece02ec6916b99346605eb4573

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWV:ROdWCCi7/raU56uL3pgrCEdMsXzQ1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 799cba011ea00f893698a46a3f360260N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections