Overview

overview

10

Static

static

10

6ca2ba1d2c...ab.exe

windows7-x64

10

6ca2ba1d2c...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ca2ba1d2c1e9d8912b3c1bfe02a626212a6d1cbf1e77ac4e4fbc0101e30b2ab

  • Size

    1.6MB

  • MD5

    c7816d4885a4e416cdf2f650ec9645eb

  • SHA1

    a05675885b6d03faeecb7b8eb85b774c1f270df9

  • SHA256

    6ca2ba1d2c1e9d8912b3c1bfe02a626212a6d1cbf1e77ac4e4fbc0101e30b2ab

  • SHA512

    b4879fcdac7608fd42fd965c7a273ae4f421c963bcb4456dc42ef107aefb7a5a4845eef9485009cf4351d1911e67661f22a92f730687e406dc4dbd34565a6e8f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1TqOVRCtJ9TzYC36QJY:knw9oUUEEDl37jcq4nPNJ36QJY

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ca2ba1d2c1e9d8912b3c1bfe02a626212a6d1cbf1e77ac4e4fbc0101e30b2ab
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections