General

  • Target

    ed5190e2ab9284683495e8ee52f3872ef35da329d25bcf8ad046074a07e03655

  • Size

    1.6MB

  • MD5

    e66a6d0a925b7116bc14ef836a7fd643

  • SHA1

    0a8abc2df8bfcd29a393a7370dbea9631a962850

  • SHA256

    ed5190e2ab9284683495e8ee52f3872ef35da329d25bcf8ad046074a07e03655

  • SHA512

    0564ff31d1afc7fa5be67540dc649c33d3150db7a34577336b5027d8076d97642cad7e735f1ccfd3da707145b071aea9ff21fedeebbcf6d0f35ab0f329cc9172

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqb29xAmfXOGhCDPXc/q:knw9oUUEEDlOuJc5cMK297uDU/3EX7bl

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ed5190e2ab9284683495e8ee52f3872ef35da329d25bcf8ad046074a07e03655
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections