General

  • Target

    f5a79ee6ce06b08e525a153632c56ee0N.exe

  • Size

    1.6MB

  • MD5

    f5a79ee6ce06b08e525a153632c56ee0

  • SHA1

    a2643f87f17fdabf9dc9d91353aad12a01abb73c

  • SHA256

    418db43026dc944e9b770ce9cf7d265e8a7553a305431aa822debd8934b520b6

  • SHA512

    dca592d27e70bae6f7e5739082605430af82a5523f197bfa2edda1692e97ce3dba6439f2672a4cf2f45e334b313f96c136077c69b7cb820f6eaa41ef194c9e75

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8Bl6rM1k4QMQbDA4iZhn/BjDvcoxw:ROdWCCi7/rahwNUMJH4KZhVv4Z

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f5a79ee6ce06b08e525a153632c56ee0N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections