General

  • Target

    3d9a5c836f9d28fbccb15c341037c01c0b377e12c598f18e0a0daa3ba58a0eb6

  • Size

    1.2MB

  • MD5

    a29b9051e1dd970d5c36e405b96980a0

  • SHA1

    38448efc83e6beae7b442eed9dca509d50ea4b7d

  • SHA256

    3d9a5c836f9d28fbccb15c341037c01c0b377e12c598f18e0a0daa3ba58a0eb6

  • SHA512

    5fa56b0d9dadf86b1419eb0bc804e425aef6df389b98f948dcbf7dcc74e195437e30e4e5ed2b597e638fd97a91945d800d6e8b2d1e97dfad6fd94fada1b58676

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOoRIKuaxzm01z8TYFLwVB3sgQ7600pli:knw9oUUEEDlOxhWVfH

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d9a5c836f9d28fbccb15c341037c01c0b377e12c598f18e0a0daa3ba58a0eb6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections