General

  • Target

    68c5afa0a7e2fb3b40e8929f692d5dd4b7eccf4407b2d259c27c4dd1ace8eead

  • Size

    1.7MB

  • MD5

    b1993a2664c7bd525179e67c83b6bdc9

  • SHA1

    1ed02d277b11dc1f9f78a4a57276fa402853ad9e

  • SHA256

    68c5afa0a7e2fb3b40e8929f692d5dd4b7eccf4407b2d259c27c4dd1ace8eead

  • SHA512

    5c6e1ed72037048f029406c7b7a033b4d825aeade47f2be91bebdbb7575c43ad01a5b5a2c3520935ade60d2153c3acf043f5b0c86f1f05bdbe08140597349516

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqP0f/wXlJ9ip7M1UQQBrxM30fxCrWkQ2F:knw9oUUEEDl37jcqsgmk8Rw8q3

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 68c5afa0a7e2fb3b40e8929f692d5dd4b7eccf4407b2d259c27c4dd1ace8eead
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections