General

  • Target

    c428be1708b82f6fdc8eff0b86de4f40N.exe

  • Size

    1.9MB

  • MD5

    c428be1708b82f6fdc8eff0b86de4f40

  • SHA1

    19b3e54991d4ac56121da05901804e857aa84834

  • SHA256

    b2d8d52d3d28cd412896b36a68e9cb5acc0763adf34e606d8368e571cf21b500

  • SHA512

    f0363abe63d873f7ab127a7f7db66f8b1a00893c0c9c35fdc2dc79d072b3d7b5b5d014ec57c649dd8033b37c95deed2793fd080a04abe6e3437d327a0bd4b2c4

  • SSDEEP

    49152:Lz071uv4BPMkHC0IlnASEx/RiNlFc2HLE/z0:NABm

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c428be1708b82f6fdc8eff0b86de4f40N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections