General

  • Target

    5d05a99fac42519600f221e363324f80N.exe

  • Size

    1.6MB

  • MD5

    5d05a99fac42519600f221e363324f80

  • SHA1

    1aa60d440d13a92be9d6826cc23c766d07ea4a4a

  • SHA256

    e5877aa8190bca4ed27ec22a2b1e938b60b38f5c3d574e550b569147ce164a5c

  • SHA512

    a93a7c72bcbe858bf5785d59e08f75f023553d7a1151c1628766bf309176f2f0b538e74a639aa454edfac0eac4fbdfba447edc2da2d4ac1e5d086472d1095b5b

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQC7FY5ANGrT7jf1rQy9nqJNMsV80Mz:ROdWCCi7/rahW/zFdDEANW7rhcJuuq

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d05a99fac42519600f221e363324f80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections