Overview

overview

10

Static

static

10

HEUR-Trojan.Win32.exe

windows7-x64

10

HEUR-Trojan.Win32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Generic-79d528c7633e24428b4c786f404e04c314cc0eedf89e0591b2ace3d4bf6db9f5

  • Size

    1.7MB

  • MD5

    b8e5bcc4253c5f2a994639e105553f11

  • SHA1

    5419986576e10495cc7bf333e1ebfdf768bc8adc

  • SHA256

    79d528c7633e24428b4c786f404e04c314cc0eedf89e0591b2ace3d4bf6db9f5

  • SHA512

    08b745d049898719ca8943cabababbe718fa8bcca18678b3ee01a8dab500c3fec070c1e134c347af99f0f9416c90b33dc473b7779fe3a1fc5f25c8615c1fa8f8

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7Edr2gKFkKLzqZPB:knw9oUUEEDl37jcqMHdoGpT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan.Win32.Generic-79d528c7633e24428b4c786f404e04c314cc0eedf89e0591b2ace3d4bf6db9f5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections