General

  • Target

    f50aba980ae7936d0e28c559b07e63e0N

  • Size

    1.7MB

  • MD5

    f50aba980ae7936d0e28c559b07e63e0

  • SHA1

    d5449b32176853c41891b2c142a01d767b6fbe61

  • SHA256

    c047e4dfdfef8f4fe8f61fe2dfcdff1c40cc468200d4758d6ce32c3785696951

  • SHA512

    c2cf4cca124a8de3bc021cba6634d99bb554ee418235c08407ce94333ad32df210c280def9f1756cb0968cf2b2644a891c7e1d0d4e75bc245ea6c2e6bfb8104d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7MdbCbc5wJ+Ph8jiigOTFUOeOUn/zSsw2QvS:knw9oUUEEDlZMVyc5K1jiiJTgmsV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f50aba980ae7936d0e28c559b07e63e0N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections