General

  • Target

    a5c90c698bcf5af6528c3af3770834bf7079a22e267f7541dbd013addcc4ee5d

  • Size

    654KB

  • MD5

    741b85070bab4496b734f36b596675ec

  • SHA1

    2f9eb4513632bc77d94043fc797ce14e3bc24c13

  • SHA256

    a5c90c698bcf5af6528c3af3770834bf7079a22e267f7541dbd013addcc4ee5d

  • SHA512

    651fb034bd8069d818326a97221c0bf516ae0a9d7bd04b726b4963f98a6755734daa4f0dae4ce6f094b79df0f5e3a75da9bbd731a60718f2c70649c77f19b726

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSy:fsJvQm7sK+/XrmNRlRZmSy

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a5c90c698bcf5af6528c3af3770834bf7079a22e267f7541dbd013addcc4ee5d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections