General

  • Target

    fbfeed256685d86ba11e01aa4b53139e3f19c0083c647a64c77049494e9249b8N

  • Size

    1.4MB

  • MD5

    32b9c05d2d432f44654b9658e03b5740

  • SHA1

    9d5043cdbdd1a6bb13a358466fff9defda5625f9

  • SHA256

    fbfeed256685d86ba11e01aa4b53139e3f19c0083c647a64c77049494e9249b8

  • SHA512

    fd4969144194c276ebae0b9128db084da2a53285045f6c8e9ef0e3487195d9681431c2abd2e94bb290e66013bbda9d50b1aaaf2f3ef1b5ed1bab5ea774dee75c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQ6thdqPicRWdKenvn5MoFOHZmVP:ROdWCCi7/rahW/zFdDlhUKCmeoF6AP

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fbfeed256685d86ba11e01aa4b53139e3f19c0083c647a64c77049494e9249b8N
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections