General

  • Target

    ca798654494e39ff1b56827c6489ccd0N.exe

  • Size

    786KB

  • MD5

    ca798654494e39ff1b56827c6489ccd0

  • SHA1

    891631cc84a799e8ec5cd69ff654d4f27a56ac81

  • SHA256

    fd9a876acdcabd7f50dec4babc2c58b5500e345751187ffa7bb05699c8b22c9f

  • SHA512

    03cf61f81b9efb9161d08b4af50cb67b187c49ae985b9db1ce64043606ba3ce476c720aeb83724f2c8a4d2bebfd43de57746e1a989e4c6cc36d777f2254ed00b

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3RTi6UD4ZwdWZ097bf8:JanwhSe11QSONCpGJCjETPl+Me7bPonT

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ca798654494e39ff1b56827c6489ccd0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections