General

  • Target

    3c4f5e981759f4edb030641d47a4b765df5caaf270b6f5a9b575a48e888fd81a

  • Size

    1.4MB

  • MD5

    e9782fc3e76944ada9aaf0dfd3b70069

  • SHA1

    1e22f3beb0129da607f279aa6abb0c8903e88e1b

  • SHA256

    3c4f5e981759f4edb030641d47a4b765df5caaf270b6f5a9b575a48e888fd81a

  • SHA512

    d5fdd064121a3235ee35f75130dc46e58f412272a3c4f993cf989b5f6f88933ec77fe4c412080ff4f886f46d3206029d701e51faf147515cf6f2c1d41dbfe0dc

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tsytA7Wy9etblV:knw9oUUEEDlGUJ8Y9c87MQO0H

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c4f5e981759f4edb030641d47a4b765df5caaf270b6f5a9b575a48e888fd81a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections