General

  • Target

    cffe5161faf0d6c386bcd2ed67060020N.exe

  • Size

    1.4MB

  • MD5

    cffe5161faf0d6c386bcd2ed67060020

  • SHA1

    c0f8fcbb8a221382fbebe2e8d76c3f0771fe4bc0

  • SHA256

    c2e4bd86f0f8275e17ced9d088b4f29dcc7dc75da0d2dbb3fad3278a71dbc446

  • SHA512

    abc7a258f72439145f777ba1b8531e7713ebcf2fcb45e5260644f7281e914dab8d1bd45c9c0f8f8680f57f4da9bf4d0146360cec4114e5cf0632017fdbb0864f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t2o4l431REr0Ep/7FeR0t:knw9oUUEEDl37jcmWH/IyErjFyVc

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cffe5161faf0d6c386bcd2ed67060020N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections