General

  • Target

    ff68579cd7d0e483df6c7d5dd0dfb0e0N

  • Size

    1.2MB

  • MD5

    ff68579cd7d0e483df6c7d5dd0dfb0e0

  • SHA1

    17015feccc8c8df2a8465c76a6e6c01b47745581

  • SHA256

    dad3979f2c76204e0240ef0a0271dd69f31b8e7699a1350b636d5382e194d72b

  • SHA512

    0186c683ee4135ea0010de6a98396868895ea17265773ecf44e86d8a378a25c8193a013963f4f86a04033ba59e13a9639e05a845eb4106ceb21def4dfa39b6fd

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMab5CXAEC1N:ROdWCCi7/raU56uL3pgrCEd29Cbk

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff68579cd7d0e483df6c7d5dd0dfb0e0N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections