General

  • Target

    3a84f49f50b14757ebc49c5addc7bb80N

  • Size

    1.7MB

  • MD5

    3a84f49f50b14757ebc49c5addc7bb80

  • SHA1

    970f5f3d9706e958faa77f61649e9feaf89c7847

  • SHA256

    e811ebcbcd393241185d71a0ab4192ea59aeb324ed6dc9cb7b3420a88aaf241f

  • SHA512

    3cbb593bd69789d6c6191012c5a8db2983fede41d4248a8e70a4d92d2b3b21f3d65c552dd411e51afc8e92889b3e9cf6a54d8d3f07ecd0b0f76f28417ed52fe3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGV0Bm2YkYnKwaAt02:knw9oUUEEDlnJ2k2oj6tPYnAfnRw

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a84f49f50b14757ebc49c5addc7bb80N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections