General

  • Target

    95dc69492f9a803a40659d4f69bab4cb5a0c5be0a90f0acb43fc3d88018f0a98

  • Size

    2.1MB

  • MD5

    49035a566112212266163e1185c75240

  • SHA1

    19261322960abf7df9f484d947314e6ea3defd9b

  • SHA256

    95dc69492f9a803a40659d4f69bab4cb5a0c5be0a90f0acb43fc3d88018f0a98

  • SHA512

    3dd85183123eda2d899bb9035d30e45373c231ea18198a561627273dd6c71fed2c75ebf8b63d4c67497bc97949c6a0f85fee15312ac00d5cab7f7267849799c3

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dz0J:N0GnJMOWPClFdx6e0EALKWVTffZiPAc4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95dc69492f9a803a40659d4f69bab4cb5a0c5be0a90f0acb43fc3d88018f0a98
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections