General

  • Target

    a8f1b8afdc9ff32226e1f7a1ed96a85ed3f0826b8355c533f8cb5ae18fd1efb4

  • Size

    1.9MB

  • MD5

    c6eb2a9f7f5eacfdb28e110cd2bee032

  • SHA1

    d3eb40310401dc1d40515cf4ab0c8d1901cb0d4a

  • SHA256

    a8f1b8afdc9ff32226e1f7a1ed96a85ed3f0826b8355c533f8cb5ae18fd1efb4

  • SHA512

    ff584177f9fab7f2f596650bb9c3c6aa55cb5d4ad05cd84b2669b5c929eb32c6a2e5aa94551973935fbbc91db96e2510b28abb8d8ad98839311d97c02c4d273c

  • SSDEEP

    49152:FGUzr9GOWh50kC1/dVFdNaeUE3LqW1T/f5iBA9R86DHVVzP7ffQmSd:FG6r9GOWPClFdNaeUE3LqW1T/f5iBA92

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8f1b8afdc9ff32226e1f7a1ed96a85ed3f0826b8355c533f8cb5ae18fd1efb4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections