General

  • Target

    ff57a8c5dd75639f0152135a47b73d00N.exe

  • Size

    1.5MB

  • MD5

    ff57a8c5dd75639f0152135a47b73d00

  • SHA1

    ab76d51220db44bd9d80849e87373bbf4a73b2e9

  • SHA256

    c5e2440b0ed11ee3d359ff3960bd6117d61693552fdc7335dea3e4c0c4764b79

  • SHA512

    c91bb179201bdc5f5b1d13191106a1d67de3a69edd39c730908e692422c9a84728068d9e4239a0265e3f689480056746670c157ee0a4f5fe277d9b3b433b18de

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K28GKY7kcRgRlJqnu:knw9oUUEEDl37jcqDrUS1Bgkcotv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff57a8c5dd75639f0152135a47b73d00N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections