General

  • Target

    2ff4ae55f48b8eb3809ea73083b5398cf18b9234892a4101fee966e42a3bef10

  • Size

    2.0MB

  • MD5

    fb822556210d997f9568e8aba71ca627

  • SHA1

    7a64047e9c7561801f26ddff673eaaeca9b25aa9

  • SHA256

    2ff4ae55f48b8eb3809ea73083b5398cf18b9234892a4101fee966e42a3bef10

  • SHA512

    298a1e9c6ca905c3ab62b25d2f3e5e6379efe3152769d331b99f4b39f19a396274d592256e171904435ac0932fdb2e9d5ae9f5252615026aa1bf46c076832b6f

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQoyBcILNoFW:BemTLkNdfE0pZrQ5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ff4ae55f48b8eb3809ea73083b5398cf18b9234892a4101fee966e42a3bef10
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections