General

  • Target

    ef5036e99913e6c9026b0e713abd05d0N.exe

  • Size

    1.8MB

  • MD5

    ef5036e99913e6c9026b0e713abd05d0

  • SHA1

    28e045c31014d2074390e724e3a8d4d83d10b3d5

  • SHA256

    31711d303a5af9ae19f76b2940995d38bcaff77ded18ee527f1189cc0eb80972

  • SHA512

    06b05cc5aed6b8d0afa6a09e97c116d2af9ff8d2e4557f076bb3e7db35c5241f53a4c7a6733638c4ac94d4ddb5d389d571a0d8c55927658e9d642b4b619efe36

  • SSDEEP

    49152:ROdWCCi7/rahFD2P6QV8NqMyLEQ1VqSekw:RWWBibad

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef5036e99913e6c9026b0e713abd05d0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections