General

  • Target

    c18fcad639fd8f2050ea361200e45610N.exe

  • Size

    1.6MB

  • MD5

    c18fcad639fd8f2050ea361200e45610

  • SHA1

    3e4fc2801c3d0b0de1dd642922ce6ea5881921d1

  • SHA256

    d9c604076c310a668134d37dfc4c017434d732d0d26f4679cab20829336188a6

  • SHA512

    e82ab8c4b2854b59b794d03eb34f1e2e63189e3cbb49f16ed319efa893a185f57448997816b63ad034720907ffdda0981238a7b8ad1d3b98f519860fcbc45aef

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7Edr2gKFkKL3GReZ:knw9oUUEEDl37jcqMHdoTIe4W

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c18fcad639fd8f2050ea361200e45610N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections