Overview

overview

10

Static

static

10

872df9978d...2f.exe

windows7-x64

10

872df9978d...2f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    872df9978dbf23801962b799ae64c305dd24811580ddf0a38b8216672cfb022f

  • Size

    1.3MB

  • MD5

    ca6ede12cfd254a352feee87eeb6eb1b

  • SHA1

    684cfb7bef114483dfd58cb49d1c1d75ec08018d

  • SHA256

    872df9978dbf23801962b799ae64c305dd24811580ddf0a38b8216672cfb022f

  • SHA512

    97a2be22bc9f7bd201c805d3f20f2dc05a5b0da994407fe7d6d368357e3da73f57fe0854a93c047562ab4470c1ff045b9992c8831dc843a6701486b7427a9e3e

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFu3PzZtvIaUniop03bVyh:ROdWCCi7/rahOYkZtg94Vyh

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 872df9978dbf23801962b799ae64c305dd24811580ddf0a38b8216672cfb022f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections