General

  • Target

    def6f5b61df9dff12b70176b47e88330N.exe

  • Size

    2.0MB

  • MD5

    def6f5b61df9dff12b70176b47e88330

  • SHA1

    5ee1830fc9e6ae85968313ed3eee621f5e5dc96a

  • SHA256

    63602de17a8e39e69b572ff520ebf183c3097f717a21bf1d8f577ccd6dd24bae

  • SHA512

    e0ba2b27b3a844e3e29ace60f0835cf531c694cadac695f38bddf8bb14a5d9463f4d043fbe462cd89659227d83313b4797b805d2be4ebc04797f6091c94cd00b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgU7ybfu:NABV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • def6f5b61df9dff12b70176b47e88330N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections