General

  • Target

    a1889afecfc06b7798d285c0634ec180N.exe

  • Size

    2.0MB

  • MD5

    a1889afecfc06b7798d285c0634ec180

  • SHA1

    e6278dc33713f957d00647f0c44b987bb1e570a0

  • SHA256

    3d48049d3f8dc76c2b87e515a8fdb29c268330f839c80000c748095fa9167748

  • SHA512

    728c787016d240d6d19201bc87009071aeb466cc714db2580495d5eee592d2307d3f72663c82b1d1a4ce918b9f74edcc59e749a12e4ac1bb5a3093f322e5fdd2

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNI/TQ9f27dvapbkS+rvWYs4W:Lz071uv4BPMkFfdk2a2yKmkDqx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a1889afecfc06b7798d285c0634ec180N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections