General

  • Target

    f468cd17543ab00b7bd5a21bb0fceb80N.exe

  • Size

    1.6MB

  • MD5

    f468cd17543ab00b7bd5a21bb0fceb80

  • SHA1

    eb6cd8e2489337ce4265e8cba41c669d0e48abc6

  • SHA256

    1078d7c5852d0489bc5ab155994e67f57ecc637de48035e90b10b136f3d4dc52

  • SHA512

    ec652443b90db38ba10a59b53df22e00476058bbfa630d7ef6d3bf2615515eb2f32be9d0c5ded672e6c35f550b7e41b5ff05b21fde8c1c9eed94ffceeb5843ca

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVZ120/rRodvVwwQQ:knw9oUUEEDl37jcq4QXD3yBik

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f468cd17543ab00b7bd5a21bb0fceb80N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections