General

  • Target

    a798fac4fc52e2a1cc3a492654156c80N.exe

  • Size

    1.8MB

  • MD5

    a798fac4fc52e2a1cc3a492654156c80

  • SHA1

    3d09fb0ea8a157d7400924880b609dff2c5d86a1

  • SHA256

    c4f6951b35977fe8eb2ea78ca6bf41050dd1a4152f6552b599e096a45433b743

  • SHA512

    a762a2f1516185dde7ed3a7a1b853528a4618fc06ebd654af459bbe902b48a0f3d9f587aa384eef153abbcb19579107a05aa0c3013a36938166a82d4a7ebf616

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEd2hXcfFfikaWM8:RWWBib356utgx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a798fac4fc52e2a1cc3a492654156c80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections