General

  • Target

    defa4405726857aff006f61211105600N.exe

  • Size

    1.9MB

  • MD5

    defa4405726857aff006f61211105600

  • SHA1

    ca21b676ffffdf92efc5b086cb670402b33803eb

  • SHA256

    6748564f238463fc5230e11df564d04f4ded52e935a3372dd7b8a3dc986f4200

  • SHA512

    8336f383d9347d3a1ea98e58ec5b4501742002caf333cf89c2f6fda7621ba0f1de198bce10322ec1c312f2b6c157c07f359bb51bc35e01393880766aacdbd990

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOGApwJbxgU67tqSNP3l50l6no:knw9oUUEEDlGUh+hNGTbu5bm6Y

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • defa4405726857aff006f61211105600N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections