General

  • Target

    861826ee35b8660a8a68c6f5d6f40f50N.exe

  • Size

    1.2MB

  • MD5

    861826ee35b8660a8a68c6f5d6f40f50

  • SHA1

    2f65f2bbaee0d284138f4b1785251410bfe0bea1

  • SHA256

    21afda0a51ac333b52ddb3d6f30e1c73c86634180087d27e1c8a1c2a737504c7

  • SHA512

    6eee88e74ad314f2031d3b1b996a4e9a5ef6325e796c205f5bd8d2c0fb95d31c54b05f4f4ebf2cd9c894dd21c1be8a24b0289c16780e40271367f6044d0a1243

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcWl:ROdWCCi7/raU56uL3pgrCEdMNJ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 861826ee35b8660a8a68c6f5d6f40f50N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections