General

  • Target

    fd16cfdcf0d2949ec18676950a03a120N.exe

  • Size

    2.3MB

  • MD5

    fd16cfdcf0d2949ec18676950a03a120

  • SHA1

    f80e953b150aa7b76c11b98de244ba0bdb8e638d

  • SHA256

    0e561a3b77eef09ad04803ee4d433814177a9c9241fd96a49d57e51bd32c6255

  • SHA512

    c1eec70251282fce14a047011021ff2bb044b57d1fc489927abc509593cd5214c7e9125a2770953da527ee3903de398f8d4c658cd39028cba3ae9f031932b80e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLmM:NABy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fd16cfdcf0d2949ec18676950a03a120N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections