General

  • Target

    af37a41e8d91882d9f78b59df3c40850N.exe

  • Size

    2.3MB

  • MD5

    af37a41e8d91882d9f78b59df3c40850

  • SHA1

    b3ffa5732d5b963304fb81250d2c65093db5eb92

  • SHA256

    4b067b281b46cde8625320cd0a7f6bfe54bef3b57c8504555bdbb815e606d48a

  • SHA512

    5d88f9fd85f4e4b2d60cdb3800098404ab5f4e38cbed3467c54a061a875ae4b3f9c6a8de4c3c219aadc85fa48916b42d075d93e8d93e488c8e881e44b0ce86b3

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqQ:NABT

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • af37a41e8d91882d9f78b59df3c40850N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections