General

  • Target

    91cdb89478c073dabcb4252d6f249097593024abadd82686129818c44ffb4f15

  • Size

    2.0MB

  • MD5

    ccdb35af09eb0e451e2715ffad3cc81a

  • SHA1

    816845cc6d2c3012e1589970b9ae9380ad7174b3

  • SHA256

    91cdb89478c073dabcb4252d6f249097593024abadd82686129818c44ffb4f15

  • SHA512

    1302f82ca3f779b4d12a5aa392f831f7939141ead14a9bd48872b73ab9acab7e1537c6aa5f77d4f054b8d0995c92e1de516bc15d5e6eff0e35cf739946d87f2d

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcW6:ROdWCCi7/raU56uL3pgrCEdMKPForH0

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 91cdb89478c073dabcb4252d6f249097593024abadd82686129818c44ffb4f15
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections