General

  • Target

    c89d1a356f250236ae8b60c4af05ce776d39b9c3efdf5ea3d023cb4d954058ea

  • Size

    1.2MB

  • MD5

    4d59fd0ab8df2a7c2bc6f3ff23887512

  • SHA1

    2612eb1cdbe598cc613aadcacb26b1e83f4be0ce

  • SHA256

    c89d1a356f250236ae8b60c4af05ce776d39b9c3efdf5ea3d023cb4d954058ea

  • SHA512

    18018937dfba7f04e670d3b63b43341d2767f1048c1a6f77abafb77e7a2281e37ea30f705b12e0de64e073a7877f591252a8f19a2727285c8d2fa0417257c8c3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNsp/CyO42Q5:knw9oUUEEDl37jcquVoVJGe

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c89d1a356f250236ae8b60c4af05ce776d39b9c3efdf5ea3d023cb4d954058ea
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections