General

  • Target

    474bff62e24427f4772d035cd12c5090N.exe

  • Size

    2.0MB

  • MD5

    474bff62e24427f4772d035cd12c5090

  • SHA1

    74f9dd2bd81ac78c0689ce14e54c9426242af3f0

  • SHA256

    d3dac837f31eb5da4a4b20ee9a5397c1ff9bdf8c04893e21d9e84bbe545a3252

  • SHA512

    946dcb72bc048033402d365368ab2c0f2fee493f55143e7b156d1544455061c791dee3abde3869869b848826448b49f13244867113f4e2923f74a24f84364e5f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDxwkW:knw9oUUEEDlGUJ8Y9ctYVk68NdzqhTl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 474bff62e24427f4772d035cd12c5090N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections