General

  • Target

    648a455cfaf4ec809f64dedec8dc9af0N

  • Size

    1.6MB

  • MD5

    648a455cfaf4ec809f64dedec8dc9af0

  • SHA1

    71d058c1a9f2c962635ec5419fd5d45515f44e85

  • SHA256

    83f75382897f8bb0e22c57225ba62ecf88702e67fad5cd27ced32a18e21f71d4

  • SHA512

    e326a8be89096b382b78d15c7dde4d5c997bc5a0a3613ef284eb573e7ad4b51cc7228ce7501176cac3d631ef6e0f3b23b5f7d15ecff23209be5448312e78983b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7AgwMxqKltx2:Lz071uv4BPMkibTIA5JnJ18

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 648a455cfaf4ec809f64dedec8dc9af0N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections