General

  • Target

    5df27ef324f09095de414b0d1bfdf8ce874baaec14a19908195390d985cc04bf

  • Size

    1.6MB

  • MD5

    dd8a7f9dc351a545f90ecb5ccf74cdb8

  • SHA1

    1a44a025ace33ce1054429a8d4b972f25463c8c8

  • SHA256

    5df27ef324f09095de414b0d1bfdf8ce874baaec14a19908195390d985cc04bf

  • SHA512

    264db8298be9a9f7a87729485fbce8f18579019faf6d144352a458bd8af26ce631d4bad9a53b35e910bda37ce60de5f78a142068479be11551ff8de0d860de1c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOhSkEaFUG51+oAL7ZQJTVMKTbc1gsemVk8e+ogzOs:knw9oUUEEDlOh516Q+oxxcdBDog6s3

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5df27ef324f09095de414b0d1bfdf8ce874baaec14a19908195390d985cc04bf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections