General

  • Target

    89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

  • Size

    1.3MB

  • MD5

    f1cfee43fb838f788311f7b3c9b12123

  • SHA1

    91ff89d62abc2ae7377194ef2b6f9366069d6d29

  • SHA256

    89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a

  • SHA512

    a1650ceeb8343f0097adbe8c822e0f2c764ffb6f18b67d0b150e050fa8d978b138fc610dc59512ae67bc9cf1506deaa55e1f3b2ae845505cf69c47d09e58bdb3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqa7MZt+XRK4FgNyhvGXgYc:knw9oUUEEDl37jcqa7V/gwQnc

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89cdcd76b1b1e74ad8b0c00ddb208cf7e2fe5e07f7181fa1fedcad783d2ac94a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections