General

  • Target

    cdaa1395799173b9112f0a0ca6de4a50N.exe

  • Size

    1.8MB

  • MD5

    cdaa1395799173b9112f0a0ca6de4a50

  • SHA1

    d02d67595ea218fdce8d1ffe853a286d684e8694

  • SHA256

    1942dd53a6abff9a9046a661f1d8932e2cde604217fd1f8d1aeb5081f6580195

  • SHA512

    977599cbc3329c65697cd38e342018f197a2cae72d730c221aba0d3f3eddc097ecba2fad5f9745757ecfb9fcc9e005a2b172921905ceefb0ae8a803c988ad848

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORNnkQLikuGwb:knw9oUUEEDl37jcqDrUS1pRiRl4GoiF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cdaa1395799173b9112f0a0ca6de4a50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections