General

  • Target

    ad0187f173a37fece1335d14d3267fe9786aa2d30bc8bd9c96f926c25dd07d8f

  • Size

    1.3MB

  • MD5

    aa0ccb786263bea8b59970fd59df75cf

  • SHA1

    73ec9ab5a83600f65b9a956275f51545c1ecb3b0

  • SHA256

    ad0187f173a37fece1335d14d3267fe9786aa2d30bc8bd9c96f926c25dd07d8f

  • SHA512

    988ac80f43d228f26245354f061cc9df4efbb838265c8b520ae08dd7ad98069c2cd86b75c2afc9fc318b20e3761a95563089720915eb5c363f2545bb313c5b2e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2Pz0j4EBbq:knw9oUUEEDl37jcqDrUS1AEg

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ad0187f173a37fece1335d14d3267fe9786aa2d30bc8bd9c96f926c25dd07d8f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections