General

  • Target

    f428eba033d921fa22fcb699abdceb20N.exe

  • Size

    1.6MB

  • MD5

    f428eba033d921fa22fcb699abdceb20

  • SHA1

    4bd28005431f02729a90b056175808105a41f8e7

  • SHA256

    c71109565b4f1ecc0ee942effca393d2db348ece2d851c1889b7d5085e876578

  • SHA512

    984d9f42933e6f3abc50e4e006688eae774b89eafafde24abb53fe0538e2fd155fbacac3f9191acea2089d603b1140cca1a270a1d3108c04413aa8bd90ebf980

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1k4QMQbDA4iZhn/BjDvcoxj:ROdWCCi7/rahwNUMJH4KZhVv42

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f428eba033d921fa22fcb699abdceb20N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections