Overview

overview

10

Static

static

10

c5bb3a489e...1d.exe

windows7-x64

10

c5bb3a489e...1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c5bb3a489ed807d3942ffc2d2e6ed3b4fc995d598e97a4863c35078864dd2c1d

  • Size

    1.5MB

  • MD5

    28dd4daf79573f55f11e54b98e821f0c

  • SHA1

    ae7cf3ca31c0923770ff90ba71bb23cff0dc2eb6

  • SHA256

    c5bb3a489ed807d3942ffc2d2e6ed3b4fc995d598e97a4863c35078864dd2c1d

  • SHA512

    f383b8d19ab898b5e395282308156cfb0fbec4c3cab202c4533935634b272fb89be2d33ff9eb2aaf388efa5d2c5ac840ce7f6e682a958f69f7c6dfac6810dcd2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcdSdm8e/t5YT9eOE:knw9oUUEEDlGUJ8Y9cdBMy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c5bb3a489ed807d3942ffc2d2e6ed3b4fc995d598e97a4863c35078864dd2c1d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections