General

  • Target

    ba4b501fc6ab583a6d03977b84ab64e89793cc47ea509eac7f5b81d8f5e4f883

  • Size

    2.2MB

  • MD5

    b6c969a5b3b0f590b40b5f2a808c8804

  • SHA1

    1e200dfe012f17c39b9573578f4530d0663a12da

  • SHA256

    ba4b501fc6ab583a6d03977b84ab64e89793cc47ea509eac7f5b81d8f5e4f883

  • SHA512

    3dcca3cb5ed68d985002b905a821f5bbd4fb52f752a0260aba0f2427030d60879c315390bcde7e625aa71032a9e7f100ea8efe228ae8bdb67c37d91ccb28911f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ANXx72mG:BemTLkNdfE0pZrr

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba4b501fc6ab583a6d03977b84ab64e89793cc47ea509eac7f5b81d8f5e4f883
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections