General

  • Target

    af61e94ef107d0329cdbabaa1895c7437ac97efd36dc5f0c383ab8a24d1ebeab

  • Size

    2.1MB

  • MD5

    b88913373bab852673092719e6934780

  • SHA1

    be71e25c63b5fed5b4f6016acff6c6055e105626

  • SHA256

    af61e94ef107d0329cdbabaa1895c7437ac97efd36dc5f0c383ab8a24d1ebeab

  • SHA512

    085e2a369d79996814799f7d67f835bfc57ad145298e562a308290c99726437942ffee4f33da4c2c6467a045a855a39a783d3c5d6a0627a93554019a065d0043

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD52U7/dNU:BemTLkNdfE0pZrh

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af61e94ef107d0329cdbabaa1895c7437ac97efd36dc5f0c383ab8a24d1ebeab
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections