General

  • Target

    ca23029848603f2398359528b434c2c077afea3cb72c31f68ec71809b1c1825e

  • Size

    1.6MB

  • MD5

    a881e51ff66a329d5bbbb227502906ec

  • SHA1

    51e765f73f4774094abb7bb820eaecfbabd4b231

  • SHA256

    ca23029848603f2398359528b434c2c077afea3cb72c31f68ec71809b1c1825e

  • SHA512

    d7b06d30cc5ef2ab1e66edca8f33596ce1941a5af2768bb5d36fb61ffc81505fc2bb64a35d7cdde193dc8030fbb3946a921b10d38d8a265bd54cfef35421cfc5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOyldYYz4Bg0xFW9RlWP:knw9oUUEEDlGUh+hNMz70riRMP

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ca23029848603f2398359528b434c2c077afea3cb72c31f68ec71809b1c1825e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections