Overview

overview

10

Static

static

10

HEUR-Trojan.Win32.exe

windows7-x64

10

HEUR-Trojan.Win32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Generic-a3e7eea13001d8beb323c9fec79faf8a7b5816f57fe7b090a47f3fb011ce7511

  • Size

    1.8MB

  • MD5

    bbb3de9d13d88395f4257ebb818393e7

  • SHA1

    15caaf904dae5bd602b762a783b11895b5ae495c

  • SHA256

    a3e7eea13001d8beb323c9fec79faf8a7b5816f57fe7b090a47f3fb011ce7511

  • SHA512

    90e67af45c3794a6a0714de25354335d1a09dc2c7c879ac160285ddf2db77ded3d13b63acfeabfdb109eaa00782f8bf70701019070fb7ba4faa37c4c9f3b0e5e

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBWelxqsfNMNr79DsIZcGf3ggHFlyyJ4kmCahuGUDRNr+u4R:ROdWCCi7/raCF/Y2jSzU0O+mX7yF

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan.Win32.Generic-a3e7eea13001d8beb323c9fec79faf8a7b5816f57fe7b090a47f3fb011ce7511
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections