General

  • Target

    ebf2903b0648ddabcbeb1ef2dcb811ee201db0041cd05ed89e6c1d7e5d4732e6

  • Size

    2.5MB

  • MD5

    b488d7bd5aa91a980ff653f93868bc67

  • SHA1

    a4d10f1c7f28e223e6b42f982bfa393d86806731

  • SHA256

    ebf2903b0648ddabcbeb1ef2dcb811ee201db0041cd05ed89e6c1d7e5d4732e6

  • SHA512

    1f131e854e38e5a07a512be3a1ccc2b7b1d9fed1ec824ccecf2245c65158ae28a1b88cde81f77376c6d5dfaa1880fc5c4e70978bac3c6c6ee5664c05ff5de3f6

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wINF/Y2jSzU0O+mX7yAFa:BemTLkNdfE0pZry

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebf2903b0648ddabcbeb1ef2dcb811ee201db0041cd05ed89e6c1d7e5d4732e6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections