General

  • Target

    fda1b3a24b31472ea99d796340a3bdd0N.exe

  • Size

    1.5MB

  • MD5

    fda1b3a24b31472ea99d796340a3bdd0

  • SHA1

    cd19d7b4cb87b70498b1bc078d2340eec681d878

  • SHA256

    eb796a53daad5a3779a1a4df61b6bc9992236d0039887cdaba0ca9e4998374e9

  • SHA512

    c182440cdc0755cbf39f4ff4a5d09667b756cb91944ad241ef889b5d1784b6d4df1c58bab21d929d02b0bde5af523d584eb919091d399fbe97a44fc3fae027e0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7AgwMxqc:Lz071uv4BPMkibTIA5JnJ1F

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fda1b3a24b31472ea99d796340a3bdd0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections