General

  • Target

    5aeb3cb07c5e1b1ea46f118a951f6de2d61583fa2e3851fd717af4c6a93ea939

  • Size

    1.4MB

  • MD5

    3739f027b0395c47cee140694ab10b58

  • SHA1

    7558524f41b10af9a4886614cbc4eec9b33f9da3

  • SHA256

    5aeb3cb07c5e1b1ea46f118a951f6de2d61583fa2e3851fd717af4c6a93ea939

  • SHA512

    5b5205b47eef227528c290aaf9d87cf2add9a9fa02dedba832132ff01e603dfbfbd9c7c3a7261bd1ac114e585ca4bd32310fd4a247ccb319b6c1fa0012a46483

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosl7LiKbWZFCxm1k:knw9oUUEEDl37jcq4vLWKg1k

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5aeb3cb07c5e1b1ea46f118a951f6de2d61583fa2e3851fd717af4c6a93ea939
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections