General

  • Target

    964eca913c1d6330b49968e5c809a846b3a4aeea1cf86291a8f043d4cb1d0627

  • Size

    686KB

  • MD5

    360f11038345bdc2b6b1cbc3776b5efa

  • SHA1

    72aea4e55d96e1dd963b55a1b02cb3a80615cc7e

  • SHA256

    964eca913c1d6330b49968e5c809a846b3a4aeea1cf86291a8f043d4cb1d0627

  • SHA512

    fceeeff61019ed030de5f5ba57f77e5edca1d335dff82b75a1248b05a61644c2736cadea809f815b31b110c0bafe0451aef32a6dc592194ced392bc3431cb0ce

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XD38R+Tvo:JanwhSe11QSONCpGJCjETPlOoRWo

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 964eca913c1d6330b49968e5c809a846b3a4aeea1cf86291a8f043d4cb1d0627
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections