General

  • Target

    442c70b848227b0c4293a96ed8a266e7ab62f8c25e565261f1e648ea5eee46c5

  • Size

    1.2MB

  • MD5

    505df2fa06fc83429e440acdffc4bf0f

  • SHA1

    2b8ecacbb528a08a305208d2b73b03e8c1473560

  • SHA256

    442c70b848227b0c4293a96ed8a266e7ab62f8c25e565261f1e648ea5eee46c5

  • SHA512

    cb197dd1008f4fdffeb24d2f4f843f7b66a00d02c49855e0864d1654a69162813cdc1ff5b83fc6041a4184fd2611a529bb0f4fc31e1ff54f8ae9f080c590f6be

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KICdyyPo++UIUFlBa6rmPG7e:ROdWCCi7/rahHxJTFlDsJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 442c70b848227b0c4293a96ed8a266e7ab62f8c25e565261f1e648ea5eee46c5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections