General

  • Target

    cead432228e5ceba24359965ed7eba8653b3fae1bad5dc41b54d624cfbcb70ac

  • Size

    1.5MB

  • MD5

    4bac350d37827e3f6dda831ef3562488

  • SHA1

    61983c3f936bd7fc2f2aa2704bf10d9a80f96424

  • SHA256

    cead432228e5ceba24359965ed7eba8653b3fae1bad5dc41b54d624cfbcb70ac

  • SHA512

    82c40513f1e0895bd73b6b674f969bbf8e563b694e0454c04b2db11861522506bbbb55cf5e4ac972beab4b614ad4aaed4ae7c8cd2e94bc535e5b7289a1607c87

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1XPl9fNZA6opDPvOLNF:knw9oUUEEDl37jcq4nPUjfNiFCF

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cead432228e5ceba24359965ed7eba8653b3fae1bad5dc41b54d624cfbcb70ac
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections