General

  • Target

    89f857d17615b87f5ce45d0ce7eef8f1766f66ca6d894e59c629f98128437b62

  • Size

    1.8MB

  • MD5

    8def1526ebd4a28e5775f7a730a48f74

  • SHA1

    d86199e67b1ce2f12aef38735205c7862f4e72c2

  • SHA256

    89f857d17615b87f5ce45d0ce7eef8f1766f66ca6d894e59c629f98128437b62

  • SHA512

    1b2428c72555538ad09a61956e5bfe53568554920dafe9d06ceff41b8ceca64f274723309383a0c88f95e43be919295a8a8253e7cfdc2555ae4ddd9349ad4e3f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS5bcsf2meMSUoYOn3pEX4rU61NS6/oCs7n:knw9oUUEEDl+xTMSqm3gZE+HooCTpefy

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89f857d17615b87f5ce45d0ce7eef8f1766f66ca6d894e59c629f98128437b62
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections