General

  • Target

    8d62e9562dcdccd01ca44a7a9d2dce55c140ae381593a03c2d57c8db9f86847d

  • Size

    745KB

  • MD5

    78ee185b87f8ec82e8f346f7ca8a3bf8

  • SHA1

    6a107a06714be002ad4634748071762b339be6ff

  • SHA256

    8d62e9562dcdccd01ca44a7a9d2dce55c140ae381593a03c2d57c8db9f86847d

  • SHA512

    b4bff9466d9d6b197d652f76e7cb899bbccb16e18ae7de9ae04bb9a42ce1ce4a2e7d0f90f716b0ae42edae90f1936f0d1008e287930ece8be959e55c0b73f445

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XDOIa+ydGOARqqqw:JanwhSe11QSONCpGJCjETPlO94AYqiOB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d62e9562dcdccd01ca44a7a9d2dce55c140ae381593a03c2d57c8db9f86847d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections