General

  • Target

    d861bc8f092ef48218b6c4cf8878a010N

  • Size

    1.7MB

  • MD5

    d861bc8f092ef48218b6c4cf8878a010

  • SHA1

    935522723616b92b1a44fc186672f69aafc11849

  • SHA256

    4a7bafa5b42cc5b3f7a593a47f9bb1262dcbb344e0fa840ef4d8fa76abf46ad6

  • SHA512

    0cab2d09b64ac4a9e3c6eeb61ee54eadff4e087cfbb7291bf4defb339624ad2743cb64e5501255cb7c1bb1d928b65c33f9d848fc69da609f80fe6ae212178f75

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfU0OswWnQN:knw9oUUEEDlGUjc2HhG82Didij

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d861bc8f092ef48218b6c4cf8878a010N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections