General

  • Target

    ff0d778bf4d52fb0847c08f180906c90N.exe

  • Size

    1.8MB

  • MD5

    ff0d778bf4d52fb0847c08f180906c90

  • SHA1

    3a671dda1a9e1ba9be199073412fe3e5ea6ac2f7

  • SHA256

    fb5dd69683ee83960f02dd3f28b95d77383f29c93e7087cad45ee29d29335b48

  • SHA512

    b17d1705194a670b7a6f1586d7a0902adab90a6e3deb218616d20d205a89de99a830e96144c88f477e74bdad3a6bfe18058e9cc314cb2ebe5181455eeeecb93e

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTRdf5k5p8iKyiGsIuHn8:RWWBibaq

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff0d778bf4d52fb0847c08f180906c90N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections