General

  • Target

    259cab9a91859ccd577f3615c1df1aa8f0924a83240b8fb95c16afd7f6e3bac2

  • Size

    1.4MB

  • MD5

    2692628a2010a933c5aef6e0c8def4e4

  • SHA1

    a874049cb28e07860b8ee706e4808d3dcf3d34c1

  • SHA256

    259cab9a91859ccd577f3615c1df1aa8f0924a83240b8fb95c16afd7f6e3bac2

  • SHA512

    6a3a0ca4c24864d97c88f4e2c2b77afe3de23c5f33d370cb493be8aad9019b256297e8b7f64e4282d4221f5b9f5f9530c9d7cb63e77194dbc6b5ac84874f1e87

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqb29xAmfXOGhCgFAZ49:knw9oUUEEDlOuJc5cMK297ugmU

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 259cab9a91859ccd577f3615c1df1aa8f0924a83240b8fb95c16afd7f6e3bac2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections