General

  • Target

    fa042748452c90cc28398b897c20bc60N.exe

  • Size

    1.8MB

  • MD5

    fa042748452c90cc28398b897c20bc60

  • SHA1

    9dfda2e48130973632d191ead51013ac1d4a3815

  • SHA256

    366a1e913d9be9b54c7daa9ea97451a7390734770199a23ed2d997b13294bcab

  • SHA512

    1266a375ed04860c2ae8e1c2d661bd896a5fea17352d86f965707fd7638f9775407a9547bcd05dee929fae615fc72e29151279cba9188a78ae64107e05695bd7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi0JT/kWi5lns+ItkbtoJIaGW3L:ROdWCCi7/rahlqOdgWqnsKW7K8XnNKkp

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa042748452c90cc28398b897c20bc60N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections