General

  • Target

    c9f23efef3b92b08a0ab9d4fcc1f8f2d6b3344073456691a7f6cdd214793e265

  • Size

    1.3MB

  • MD5

    07a26cd5a6cae3a213cc81ecd4487b0e

  • SHA1

    31eebbaf9a8b7935f1558815c550b215f30e417d

  • SHA256

    c9f23efef3b92b08a0ab9d4fcc1f8f2d6b3344073456691a7f6cdd214793e265

  • SHA512

    68703a36831024487adff5d7c935be72b32ced7e2f05e3e1c7f90a40d59433fc984b78fe74ce0fa55954ea281cc03fcac00fe511fc20ba1efb7bb962cfa7071f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejaXnmqzV7o:knw9oUUEEDlGUrMGo

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9f23efef3b92b08a0ab9d4fcc1f8f2d6b3344073456691a7f6cdd214793e265
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections