General

  • Target

    0df6df7076934732842cffe09dbdd400N.exe

  • Size

    2.0MB

  • MD5

    0df6df7076934732842cffe09dbdd400

  • SHA1

    191b96db4132bd257ba933c2f1e40b23a958bcff

  • SHA256

    8b396034a7db086cd3916a1ee125e4276f0d9a7dae4b9336eba8641953544e1c

  • SHA512

    a688339430d802bc2026cab14e5804a49bf4c9e7ec1f450cfb2426e4b4576e7c28d8bea40ba5b5b0520b6d9a568a8f005da194f7dc92f09dd8abd47fbffddfcb

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoYtgW+hVkVoC2NCNX:Lz071uv4BPMkHC0IEFToF3aWlCld

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0df6df7076934732842cffe09dbdd400N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections