General

  • Target

    d9d321a7b3ebc079938ee725ece370a300c3af6cf3b419db91d568e05a081a94

  • Size

    2.3MB

  • MD5

    271ac18241768f084b49007daa55fb95

  • SHA1

    5cb92e26a1add44a51f4f1c4f9bbb42878f1c439

  • SHA256

    d9d321a7b3ebc079938ee725ece370a300c3af6cf3b419db91d568e05a081a94

  • SHA512

    a608bf4f35da3aa91b7d3cd1bc9840b98139098e89c002d36bb084f5fea9ee5f37cb2fbd6c71b00d3fab5a02c3d70a7652389f9a3ab4f9b266a2c42acf3a7b18

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUryxCqK:N0GnJMOWPClFdx6e0EALKWVTffZiPAcu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9d321a7b3ebc079938ee725ece370a300c3af6cf3b419db91d568e05a081a94
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections