General

  • Target

    ffe78ec424047dbfe5bee6090c409c70N.exe

  • Size

    1.9MB

  • MD5

    ffe78ec424047dbfe5bee6090c409c70

  • SHA1

    8f25ed7648fd677717f5132357f9a98901394f70

  • SHA256

    d9956f162c0a12b506e68623a1943392e2dd9361945d58d44e1f34a39dbae154

  • SHA512

    b2e6b9fe70f59737dcc09b76be50daa4de5cf9bd96c162f5ad60c3a43a8519b58f6c2ad261200389bc29afc218f46a1002152dcfa14adee7b57911339e01386a

  • SSDEEP

    49152:knw9oUUEEDl+xTMS8Tg3avhnV3YHZ2HFRzWG:kQUEE1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ffe78ec424047dbfe5bee6090c409c70N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections