General

  • Target

    637239d01323a8f29b7a432aa69958ff2b954a6142ce661e3f2678a04766c09c

  • Size

    1.2MB

  • MD5

    1f2b0c4bd491db24fdb0426790b245d4

  • SHA1

    c6ce2635e61b8e4aaeac0117eeb1b92efe4dc9f8

  • SHA256

    637239d01323a8f29b7a432aa69958ff2b954a6142ce661e3f2678a04766c09c

  • SHA512

    d706c7e56608c0d0af7aca332fb11ce787bcb5928e77e378bed48d28e9f0f3d57fdb81344ccc818c133e5a8a1e8e9bb1f134113bd168c833693ffd4bd63c6742

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOAub7BTVnYm:knw9oUUEEDlGUnwwA/B9X

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 637239d01323a8f29b7a432aa69958ff2b954a6142ce661e3f2678a04766c09c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections