General

  • Target

    4ff5e94fe8e956e4c3623dfabc110070N.exe

  • Size

    2.0MB

  • MD5

    4ff5e94fe8e956e4c3623dfabc110070

  • SHA1

    6636ff6c1b50ea1849a36c15627e1892faddb3c9

  • SHA256

    64391fef5894f796a4d80910f306de6292db3bc75be6e6ddd2229cb454344204

  • SHA512

    9b7d32ab11dbe0b834829a731d5222a047551f13569c42a423e4bc3d608f1d9ddd037124cb4ae25c1ad0f94bffb42f67c545eb8700956478e91df7e7dad44a99

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vqz4rB1MN:NABv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ff5e94fe8e956e4c3623dfabc110070N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections