General

  • Target

    c9f1ee0f5e08b6bae2ce0b443c3d4763b3d15067a8b33ab476c2af0d98114978

  • Size

    1.8MB

  • MD5

    22187055b3393de106ffa2dd8d5410b0

  • SHA1

    0fad769e260003d3ef09f636269257990032a6ad

  • SHA256

    c9f1ee0f5e08b6bae2ce0b443c3d4763b3d15067a8b33ab476c2af0d98114978

  • SHA512

    bedc432814c0910e3638490175d69ded46497c931ee7ab500b2d8e00ad2d2baf3e9c747775586eac1064bb1ffa97c1fd74022290ad06b041d1390428dfed4226

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmiQl77PhN/:BemTLkNdfE0pZrR

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9f1ee0f5e08b6bae2ce0b443c3d4763b3d15067a8b33ab476c2af0d98114978
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections