General

  • Target

    49c3ba38675dcf6f5464174912a39650N

  • Size

    1.7MB

  • MD5

    49c3ba38675dcf6f5464174912a39650

  • SHA1

    952d7ee0c8d8ae8be4ddaff4cb81d0db6d05571a

  • SHA256

    e3d08e32fcafa89ccc7b5b290ee656e88c6ab41f1c8c71dd4af66c59e93535a3

  • SHA512

    facaa36930caf397108623c712a7f9bf349a491c88dfe7d59db67aa87c1f3b5db9ca9fa5b8ff8bd03b5397c2750e8d8093962e2ce407683c211c4b57279058e7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTW0hm3+zc6+2Gj+jl:knw9oUUEEDlGUJ8Y9c87MeN/I

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 49c3ba38675dcf6f5464174912a39650N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections