General

  • Target

    abe404db1e627fb26b5d1e9025ec2dc5b07a756d1b22249bb471f30bf5ba4766

  • Size

    1.7MB

  • MD5

    6c031f27e8de32dee157dc55a8eab9a4

  • SHA1

    3b1279cc8e8212393cb04ae690df32908d10e2e9

  • SHA256

    abe404db1e627fb26b5d1e9025ec2dc5b07a756d1b22249bb471f30bf5ba4766

  • SHA512

    0ce87ee2b988f33eece6f35c9f2ed5312d244cf57c96e8e8e565cb6a2b71a712ea222684f0e66e5a043655992ad8d3ecab33ec340947b6983b92d852788c5701

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiDHxn2:knw9oUUEEDlGUJ8Y9ctYVk68N83r5

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • abe404db1e627fb26b5d1e9025ec2dc5b07a756d1b22249bb471f30bf5ba4766
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections