General

  • Target

    ec058e4787e3db3d7f581c5455e5c41927480d69a4716d3f5dee320c622cca03

  • Size

    726KB

  • MD5

    b4e4e84a0734c95de7c1eea845775f48

  • SHA1

    3769661e5b41b8c000cb10577c29f5712f0f961f

  • SHA256

    ec058e4787e3db3d7f581c5455e5c41927480d69a4716d3f5dee320c622cca03

  • SHA512

    096781f2ede5aad6aff7519a5b1f5b07bcc38a36d396ac97dcf163d0eb03a884450231b0adc0899a5119fe34d5f86ef3aa4c21b905305828aa748b7e82c549b5

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XDOIa+ydGOARqqq8:JanwhSe11QSONCpGJCjETPlO94AYqiOV

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ec058e4787e3db3d7f581c5455e5c41927480d69a4716d3f5dee320c622cca03
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections