Overview

overview

10

Static

static

10

2f9d6768f0...80.exe

windows7-x64

10

2f9d6768f0...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f9d6768f07dd2133db4bcc757f3dbd2e3b5ba34f8ac2817e83e37a4b06c6780

  • Size

    654KB

  • MD5

    4963689ccb38154f9763e98df6085b3b

  • SHA1

    25abfbca66156365aed5f406ecee8bd951e2db03

  • SHA256

    2f9d6768f07dd2133db4bcc757f3dbd2e3b5ba34f8ac2817e83e37a4b06c6780

  • SHA512

    48db3da734f725b440a76672841eb7408ec94f7593a0502ee8113b8bc4af1e5ffe854a88685913b84e2b5ce8448fd9cedfa384b358c13e85f47ddbe504379b51

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSW:fsJvQm7sK+/XrmNRlRZmSW

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f9d6768f07dd2133db4bcc757f3dbd2e3b5ba34f8ac2817e83e37a4b06c6780
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections