General

  • Target

    49fb58206bf8cca17c2864c2c828ef60N.exe

  • Size

    1.4MB

  • MD5

    49fb58206bf8cca17c2864c2c828ef60

  • SHA1

    c3131469c981ee83bb5376d7d51fdfa6be582d21

  • SHA256

    39ba1366d897cc99aad9c1f78561e0ceaf36a5303ed90e6457682d66f933fc09

  • SHA512

    3a22135f714152a9e775e2d5b55b5de24eae64f0fc0101cb656e46329fb7daf83fb56d253784d4f4330de38d8a83b73774558dbb2855037eed6d84bd92a6618d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQb5P0DJ8kjuf:knw9oUUEEDl37jcmWH/xbQJxjy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49fb58206bf8cca17c2864c2c828ef60N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections