General

  • Target

    f64a94855207dcf359debdb3884ca200N.exe

  • Size

    1.1MB

  • MD5

    f64a94855207dcf359debdb3884ca200

  • SHA1

    41a91356c0e4c82e8c538a09309000fd6aabfd05

  • SHA256

    29691c71157134626e4b6d02f21946159f5417b50a45d201a7cc98488ac79051

  • SHA512

    541d65a176db1f8c43d4d8a7e2ebef18914d4ed1d2f387b4f7e917570fcdf85ff096f2e92bcfb1dcb35c7abf6ccb0a94c2c4ed15c709222d4b29e1355781347d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyWjqOW/KRDcb1XzNdU:Lz071uv4BPMkyWvW/s

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f64a94855207dcf359debdb3884ca200N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections