General

  • Target

    fa7a2905b5dd0e97e67cfc1312884580N

  • Size

    1.5MB

  • MD5

    fa7a2905b5dd0e97e67cfc1312884580

  • SHA1

    ca722783fde231725a2733cf786397a9bc9bef8b

  • SHA256

    1367fdb620884485875f56f507157b5d91748bf47e8e58cdc3040fe32d9564f5

  • SHA512

    5652d1c21f9e2a095567291d6034c72223a20cbddb7c9f50bf4c533124dca554da40eceea5c1af790096ddf68d7035b623943d3e80d1f4195fcb6913b15cb278

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8YkgcnPXhDJrMsn204a/Lgn6GVgaFvBBK:knw9oUUEEDl+xTMS8Tg0FdC6GampBtQl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa7a2905b5dd0e97e67cfc1312884580N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections