General

  • Target

    ddaa64c8a2e160d5668137bc0c804a50N.exe

  • Size

    1.8MB

  • MD5

    ddaa64c8a2e160d5668137bc0c804a50

  • SHA1

    abc44eff085bd40a8b5a1bfd05ed5d0c9a76916d

  • SHA256

    d97960c1321ba91574c176d9c9c5cd1e44a767d4b1de0e4ed9a666d79ac3a02c

  • SHA512

    9b8eeb95a2f0f8e0845ce769ef1a6e1583714b2e39db899320acd5095170bca5531fcee127864dab680409b09858e26f05e3dcf2698757a5c7ace2438af28726

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/QoZo6TOZmkT4/MULanhhGuDDwDZd/heZUYH:ROdWCCi7/rahW/zaZTfnD0HYiMaVNy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ddaa64c8a2e160d5668137bc0c804a50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections