General

  • Target

    d922be7678fa9be20467157feb2d097f4923f60e60d401a49e64e28aa4320729

  • Size

    1.1MB

  • MD5

    04876844c491a7a1059b0642c2447ea8

  • SHA1

    6d34cb64cdd43e9ec99355283ebcd4476bde79e4

  • SHA256

    d922be7678fa9be20467157feb2d097f4923f60e60d401a49e64e28aa4320729

  • SHA512

    385fbbb0fd0bebb281a9b970a1247b3f9ac98b7532846cac79686293a76d3f36555ea6a0a37e2dd1b90dcd693d09c5fd6bb280dea3aee317ee1e115f416320ff

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/j3r6J3SB:knw9oUUEEDl37jcmWHZB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d922be7678fa9be20467157feb2d097f4923f60e60d401a49e64e28aa4320729
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections