General

  • Target

    644e1b95170f7b62671ec59d8b1de080d9e63906d599c61c2fa9d59db9d3de64

  • Size

    2.0MB

  • MD5

    44855040f797419a29f6c14b7a528130

  • SHA1

    371e1234c6e651a644972fdf55ba38c15212bf53

  • SHA256

    644e1b95170f7b62671ec59d8b1de080d9e63906d599c61c2fa9d59db9d3de64

  • SHA512

    7e429351047a9df6570de66dcc735e3e972b75a29e9cd00b79c720034ac20d09eebdb2dd8259bfdd12a0adcfbb82069e3a5a404bb1ba70dbccb31afb8ea19778

  • SSDEEP

    24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv3zqxG2/yJ/izZITLsV1v:BezaTF8FcNkNdfE0pZ9ozt4wIlf8nh7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 644e1b95170f7b62671ec59d8b1de080d9e63906d599c61c2fa9d59db9d3de64
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections