General

  • Target

    d28f94861fde93337b16ba880e479670N.exe

  • Size

    1.5MB

  • MD5

    d28f94861fde93337b16ba880e479670

  • SHA1

    7c52293615099bfc27108810cba2a4137d19288f

  • SHA256

    16987ae25d1ee51dadc5883966bec0bce3cc895c5c6f4a0aab0ef18ae7d94320

  • SHA512

    8786d5c1ea62caa21bc3e27b305d1c86228fa908c97a1fa5579854c59a8a3922aafd235cf0aa0b242dbd1938ab29408789120b50bf06f6c403a9c07a9b9e675b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI62NnAWYh:knw9oUUEEDlGUJ8Y9ctYVk6CA9h

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d28f94861fde93337b16ba880e479670N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections