General

  • Target

    fa7ff30808d7d5aa50dc9ef066a27de0N.exe

  • Size

    1.9MB

  • MD5

    fa7ff30808d7d5aa50dc9ef066a27de0

  • SHA1

    6de5b989d91ee48f141679a216d4ef2e2ec0e7bd

  • SHA256

    79ceb1a0249b917ce8c19578907f82948a42d66308bc13e2431bf3c61e63fbe1

  • SHA512

    6942e8d9260540de0718904f0b8e6c52a6c3a64a5e3717bddd8bf192a01bab21c338a2c79f5b0ff8be83810a14c3dfc51bbfaa5758c712fa79645d0e4bd6a0e8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGZHKCuAqImx:NABO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa7ff30808d7d5aa50dc9ef066a27de0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections