General

  • Target

    81f125df549070d7de728504a966ea90N.exe

  • Size

    1.7MB

  • MD5

    81f125df549070d7de728504a966ea90

  • SHA1

    b1008369759911a80f636bbf2932794f5d72efae

  • SHA256

    fe3fc5b7cf065b4b758db7786785dfc66c0b01cf5f51aba75c47d555f27dcfae

  • SHA512

    db39e9359a20dd9f6aebded6d47343213fa11d084f89d7d22294607a2beb749a6d9c89f46db20d24033c4f3b1774b02d2a7d73e6fc47288ee473a1c2a8f3ffd9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJrtntrB/Vh2qkYcHHc:knw9oUUEEDl+xTMS8Tg3avhnV3YHZUXV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81f125df549070d7de728504a966ea90N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections