General

  • Target

    ff9907d754db52547269458512c1a020N.exe

  • Size

    1.4MB

  • MD5

    ff9907d754db52547269458512c1a020

  • SHA1

    11cca83461cead2c2ca2fd2bf6422f353800e09f

  • SHA256

    7a94900fc0b0967afa4a4a5f1953849833efed1ba752443fb2c75dc553a2fa07

  • SHA512

    e47393228c8024b6cee4a0b6c94ffa146c0021af2b1189cb97bd9458c90195998c1b9f27cec30ec81526ee1c884686bda24f86615f8d28072f028d91634ad7ef

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOAhvwya20Fd6F0TN:knw9oUUEEDlGUnww/lWN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff9907d754db52547269458512c1a020N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections