General

  • Target

    5bbf4c6d638017f7996d9b39275d72a0N.exe

  • Size

    2.0MB

  • MD5

    5bbf4c6d638017f7996d9b39275d72a0

  • SHA1

    aff8b2bd1c112d5a083287bdb9985a285096ec0c

  • SHA256

    6b1f0096a6d7767ea04245e4d3f7be52649b62a6563eed65c92360aac48cf1ad

  • SHA512

    beb44a2bd80599fa267ef1ead13739d02998b0d049a2cbf5024e0c7a7b69a31cee2f31cdeda7f1a522709301a7bdc723e489a29766a86ba5c9425dbb5bba759c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDxwkN:knw9oUUEEDlGUJ8Y9ctYVk68NdzqhTE

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bbf4c6d638017f7996d9b39275d72a0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections