General

  • Target

    59d34fe80bcd6bccf6bd03654ae97e6ee80b46056a67bcc792ceb34f00f3f41a

  • Size

    1.2MB

  • MD5

    c0b3c4a895352e6307dc52b5e34c78d9

  • SHA1

    0c730c7edb8171c6e4bf5b6f046ca03333fc1016

  • SHA256

    59d34fe80bcd6bccf6bd03654ae97e6ee80b46056a67bcc792ceb34f00f3f41a

  • SHA512

    0c4de886aaf36c5959c29995e1fb3fa0299e769050cc1017dec4bf9edb65e40ec35542f720bff4cd300f4527edbf9ffde83889397c62d30314ee4b2325d42a14

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0vQ5NscQBedKU/Z+OBrmg/fvWsiaw:knw9oUUEEDlOuJgQ0//oGsaw

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 59d34fe80bcd6bccf6bd03654ae97e6ee80b46056a67bcc792ceb34f00f3f41a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections