General

  • Target

    f9aba28b3e76563e9f40e8aa3fa1cf20N.exe

  • Size

    1.9MB

  • MD5

    f9aba28b3e76563e9f40e8aa3fa1cf20

  • SHA1

    5bea77ae1b491ce6bf81cd27861e843812109710

  • SHA256

    893d427b2b8de05413b63d765ad488a0bc976298d32743b7f3aefa85529f08eb

  • SHA512

    d20b2b69b0880c839c703579984d71ff8ccd57dc0fdf76ea5308e6315ba552db018a14b575ca757421670c892709dac4d2858b7dc9df8cb2c59b0587c9aeae51

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pz32YXHg:NABM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f9aba28b3e76563e9f40e8aa3fa1cf20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections