Overview

overview

10

Static

static

10

a562a52268...a6.exe

windows7-x64

10

a562a52268...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a562a5226859b1e8e0fa45d1ff4003ea5a1b0dbd1478e58ca80da768d18018a6

  • Size

    1.4MB

  • MD5

    1baff438fd29092637891dbcaa4a924e

  • SHA1

    bd2f6b44d31d0bc3720b0c9fa6fead64353c7fc2

  • SHA256

    a562a5226859b1e8e0fa45d1ff4003ea5a1b0dbd1478e58ca80da768d18018a6

  • SHA512

    05d7734756554bdae74c32b5f738f77b45acfb0987cb96f5120741547947dbf41b0fbb6ba4a037759ac4057084250d9c4a89c1c35f36e5d75acc27b5e60c1983

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zoSD9loV9MTwNFSiAH93MUV5Ij6:knw9oUUEEDl37jcq4faV2MgTAm

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a562a5226859b1e8e0fa45d1ff4003ea5a1b0dbd1478e58ca80da768d18018a6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections