General

  • Target

    5639bf2bcd6c57059d391e3a48b66080N.exe

  • Size

    1.2MB

  • MD5

    5639bf2bcd6c57059d391e3a48b66080

  • SHA1

    6f5fd554ca4e95603c24b43fdbe80fe4bd75e383

  • SHA256

    9ef8a4ff4d2dd554299c1ee0a831a24455aa5dfe1dfb17dfb143deda1f30f1f1

  • SHA512

    63ab004b26a169fb7b7eaf334c416ca56642b5f47780238e5896e4267e15af588b01897e00b21104570797fcfe6c3d3ee44f1c095301e9783ffb7bddf85e3267

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1W/yXK09PK89hHq4CY67bp:ROdWCCi7/rahwNGyX687xEN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5639bf2bcd6c57059d391e3a48b66080N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections