General

  • Target

    ef9924134a949afb70db2ead8d189c40N

  • Size

    1.6MB

  • MD5

    ef9924134a949afb70db2ead8d189c40

  • SHA1

    6b410f2f9da8077d1b68e27254f702849e84b17e

  • SHA256

    1355a3a1bbab725effcc5681b77a34927eaf3a7d37506541e3e9ccbf4bbbe25e

  • SHA512

    bf3a0ec16eb187137d38cec10b45650c0ae09e54352308d2aa015a144b0d330b3f6746fbcd73dcbb6913e306e69fc81871c2fa0d8ce3cff50c4d6d56b3a41fb2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNs9TJ0qFo9+pP5sAvZqnH7:knw9oUUEEDl+xTMS8Tg3avLo1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef9924134a949afb70db2ead8d189c40N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections