General

  • Target

    aa25efe436150fb1b6d23b2f88f7a50092302d761b5aab279f3f8cba72770a2e

  • Size

    990KB

  • MD5

    209060fd9b1afdac1876e9e39ef23f7c

  • SHA1

    5c4edb67982453b00e5f5402dc7ece6ed5cf5ef6

  • SHA256

    aa25efe436150fb1b6d23b2f88f7a50092302d761b5aab279f3f8cba72770a2e

  • SHA512

    f1db4615c1cca3d67fc7bf443b76d1a016cc59d3e34dc3fb1aff52c562724c44ea0ca7bc00fcb879fe24cd497f08837f5ef03140e5692260c63728a2836f680a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrM38D3GTrgzx3Y:ROdWCCi7/rahFD2PETrkx3Y

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aa25efe436150fb1b6d23b2f88f7a50092302d761b5aab279f3f8cba72770a2e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections