General

  • Target

    fa095e508284dda98e5e383aef928900N.exe

  • Size

    1.7MB

  • MD5

    fa095e508284dda98e5e383aef928900

  • SHA1

    3e8e1f2c3ea85d000d1620c5e510e6cf2301bb47

  • SHA256

    36a00dd59d7fb7bc53f49997591039494e4d5b0a077480b9feab7debd82d5733

  • SHA512

    408f7349071257ae73dc069ba1bcd45b9d65a2cd904671549ad86ec2c49591e6892da6f39f75c8ba92702c4670c4275a02d3e0c77a8ce49b849b249214a6adba

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0L0+EYPcfgV/4zuq/lw4244PNJ+SZ7tR7lrb:knw9oUUEEDlOuJvhV/yl14P9nyhO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa095e508284dda98e5e383aef928900N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections