General

  • Target

    fd98e4115d6a8d7e6f4ae2807396fc50N.exe

  • Size

    1.5MB

  • MD5

    fd98e4115d6a8d7e6f4ae2807396fc50

  • SHA1

    6362f99a6cfd609dcd6b95a84b9a84a9f91f3512

  • SHA256

    c48e727e743917a6fd9aa66ef1d46819386ceac1a1c8069ce201c08629ff03ed

  • SHA512

    e252793214004d366f8964bb4ef1f7647e46fdd5274e36e13e946bb16961d6d42ad6f8ed20d0b69c48dafbd17241726cddcb2249e1ecff4087a726e41bb47418

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Oi8T1l4YLk1o2bPmwbGrFZ7p2Ydbf/FIunq+PALD:ROdWCCi7/ralHs1PTma87Xxy5v

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd98e4115d6a8d7e6f4ae2807396fc50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections