General

  • Target

    24bf5e1f937197e79b6a3286b3f89bdf16d643b59958d5d017d77d4998b4dc99

  • Size

    1.5MB

  • MD5

    20acc2c22e778ae8c3c6c1361c93ee50

  • SHA1

    63c50a38ea8b5fa1e9895002f8b0a818ce045dd4

  • SHA256

    24bf5e1f937197e79b6a3286b3f89bdf16d643b59958d5d017d77d4998b4dc99

  • SHA512

    4838b6501a04429a707377435a3271fdedf24fa307775e1e2a9a0f9824f2b4016af96812b322cb3efc248d5232c8afce4000841df68ee1e5c5c23a1c5a2fabfd

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTJKIROsMIbi+:knw9oUUEEDlGUJ8Y9c87Me1IRV0+

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 24bf5e1f937197e79b6a3286b3f89bdf16d643b59958d5d017d77d4998b4dc99
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections