General

  • Target

    Trojan.Win64.DisguisedXMRigMiner.pz-7b11498eeaec0ac6395736f9d165bd6746e48dd609364fb7e8ead372f6ecf62eN

  • Size

    1.5MB

  • MD5

    790a799218dff3185887219208d49030

  • SHA1

    1f875222c74808a977e5455641f4a00bf11dfa22

  • SHA256

    7b11498eeaec0ac6395736f9d165bd6746e48dd609364fb7e8ead372f6ecf62e

  • SHA512

    7349f83f63472ee467d5f6324de98df8c77067de83bf01d0702fb4583a43f8e8a898ac2b78bf2c41e2fe1663acebba28ff507a44dffb4d7255762fc64bfe4c2d

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0b5jQanBCvzVrqSz6Kb:ROdWCCi7/raWMmSdcvt

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Trojan.Win64.DisguisedXMRigMiner.pz-7b11498eeaec0ac6395736f9d165bd6746e48dd609364fb7e8ead372f6ecf62eN
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections