General

  • Target

    fbf8b48c39ee886eb6f3c194cf3e9590N.exe

  • Size

    1.3MB

  • MD5

    fbf8b48c39ee886eb6f3c194cf3e9590

  • SHA1

    fcde58c5ed75307c0eab2bc22d7930ab4e50d4e7

  • SHA256

    a38ef5743fedcb024d21e1828ead6df59ccab2cbd06a257251e944d1a31bbfdf

  • SHA512

    af1d364711ca7461d3650f37892d38af73d43e8232299f3dfeb7ef9875d47464c5b254d24cf997a61c5e02a633c9cf61e7f681829094f6057c72199de7bdb933

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8bodJj82hokiS2D50e:knw9oUUEEDlOuJPHjlPiS6P

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fbf8b48c39ee886eb6f3c194cf3e9590N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections