General

  • Target

    caa3d33df0b26ec6b89c263602ce310f4693f0e90508fdc52f3fb593f9f07a59

  • Size

    1.2MB

  • MD5

    bb60339189ca896181bcce13805e6762

  • SHA1

    06a76024c3b91dcec82073d343eb79d1be02789b

  • SHA256

    caa3d33df0b26ec6b89c263602ce310f4693f0e90508fdc52f3fb593f9f07a59

  • SHA512

    cc13f0cd55569c21ce7c5e3151cb2593f7aa494d82344999913736929fd7c5d693088e878c6c2fdeaad8dc19dfb4eab5fdae929604677a994c6c387b427a26c0

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8YkgcTiLFxr34Km:knw9oUUEEDl+xTMS8TgB7sKm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • caa3d33df0b26ec6b89c263602ce310f4693f0e90508fdc52f3fb593f9f07a59
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections