Overview

overview

10

Static

static

10

HEUR-Trojan.Win32.exe

windows7-x64

10

HEUR-Trojan.Win32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Generic-17ed1b46ece790ca13a3ed3ae6c4684b25288bfd6d24d8656fe51747281eee06

  • Size

    1.8MB

  • MD5

    13e57639ae80588828008ef29a29769b

  • SHA1

    f536025cb447f573f61dc3d7857c18e4b35da2d6

  • SHA256

    17ed1b46ece790ca13a3ed3ae6c4684b25288bfd6d24d8656fe51747281eee06

  • SHA512

    7bd43993396803c2065f5ddcf4a29d3cc0edb22d86cf1a68861008a2690e9e793016e288e05247b8f3f47715bc077b72be8553b08e48eafc27410f98f41cd856

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/IM2Tml1vEQL5Yec:kQUEEr

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan.Win32.Generic-17ed1b46ece790ca13a3ed3ae6c4684b25288bfd6d24d8656fe51747281eee06
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections