General

  • Target

    bbec8164aed502204e481c865b13248b1698669ad38512c4b4364fce8ec64dac

  • Size

    749KB

  • MD5

    a9d326af4ca5c6280b8302632d720cd4

  • SHA1

    d91ea2652928c52cc5319d26c35718f8bf08c6c4

  • SHA256

    bbec8164aed502204e481c865b13248b1698669ad38512c4b4364fce8ec64dac

  • SHA512

    bf054e7abcf25bdea78657bcb09c84842741b6a308dbcde075a629e2f1f1170c782148c7595add716f86fd602563e11fb65d04ed067e5f68d7d9c0318be7dcbf

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XD38R+TXU4ul68/m:JanwhSe11QSONCpGJCjETPlOoRz1ho

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bbec8164aed502204e481c865b13248b1698669ad38512c4b4364fce8ec64dac
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections