General

  • Target

    11f4a3d14f8665f1361fe055253ca1e9f4727a401d751535a1110af4114b3003

  • Size

    1.7MB

  • MD5

    91a9baae7edc7c704bbdedb45d12a49d

  • SHA1

    90babb5e5c889f6e7ef89954dc73c107cb723e0d

  • SHA256

    11f4a3d14f8665f1361fe055253ca1e9f4727a401d751535a1110af4114b3003

  • SHA512

    e79ef972cef0e69969e436e791bae629681efed02b634d8e814c8fc737a87c669a67ec4fd491ec1b7c669961150c31d2ede7870ab7c1df2a21e537ad282fcc93

  • SSDEEP

    24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv32wT83PzK1aAGimMFNNi:BezaTF8FcNkNdfE0pZ9ozt4wIXGmaBem

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11f4a3d14f8665f1361fe055253ca1e9f4727a401d751535a1110af4114b3003
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections