General

  • Target

    7fbba9c2a366900bfdae05085bd0ba187df5a4b1fa50e6e9a7e35d37cbf6dc18

  • Size

    1.5MB

  • MD5

    add1a2bd14343a59c55ab0f22f332932

  • SHA1

    5ac1434db643fb61287adbae3cd3da4e7c3ef681

  • SHA256

    7fbba9c2a366900bfdae05085bd0ba187df5a4b1fa50e6e9a7e35d37cbf6dc18

  • SHA512

    f2de3e8df28365fd155519ccb2cb0db3f0e576a0c3d50dabc431026a01c68f6e05e7f05bdc9230f890b0e468b9af8251c4eb4f136204aec0860bfcc04985fcd6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNgoZ1sso1ORcRKFjmgNMH6qg:knw9oUUEEDl37jcquVoVJjDN1O+ekg

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7fbba9c2a366900bfdae05085bd0ba187df5a4b1fa50e6e9a7e35d37cbf6dc18
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections