General

  • Target

    9995908dc527b0104c0268d8d1e27a8577f67e5a1e5af4192baa91bd886f1073

  • Size

    1.0MB

  • MD5

    b5959a7d288d20d29da79793a9939705

  • SHA1

    790fc089c56de91729f946d8bb8c8ec699c083d0

  • SHA256

    9995908dc527b0104c0268d8d1e27a8577f67e5a1e5af4192baa91bd886f1073

  • SHA512

    13f982f147e5445b600fecca06cbcdda92867fba5524ccc213392b69d4d58a4d19076182c8614a856ebe27dda54f1a1dacbcd3ae5215075658416c2d4b848dfd

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMIo/TbGwfgmbqjqleW+:ROdWCCi7/rahFD2PEbX5I

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9995908dc527b0104c0268d8d1e27a8577f67e5a1e5af4192baa91bd886f1073
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections