Overview

overview

10

Static

static

10

ab1492bdb7...8c.exe

windows7-x64

10

ab1492bdb7...8c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab1492bdb72ee95af014c6811f177a7d4bce1dbe94dd35bdf1bd08bafa1b118c

  • Size

    1.9MB

  • MD5

    004db268547b836d7e71a719b27e18ef

  • SHA1

    e9669b60ab285d71906fd6d36b42303e72ba1e9e

  • SHA256

    ab1492bdb72ee95af014c6811f177a7d4bce1dbe94dd35bdf1bd08bafa1b118c

  • SHA512

    9f9c905a1d8758327df3c534c01b77907a62a4917e45a61dccd12ffe3a849ca182388663137a5aa9da203ba9dae86853cc9f90b08d6a040c04133885ae8fadaa

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMPS/sVp/pG8fm:RWWBib356utgqPW

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ab1492bdb72ee95af014c6811f177a7d4bce1dbe94dd35bdf1bd08bafa1b118c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections