General

  • Target

    ed298fdd46b60bf14ff1b5c241bfcbd2fae13ab6e12521801f590b369fa96065

  • Size

    1.9MB

  • MD5

    c5fa10a9a5e0fbd4d19440e4b26653e4

  • SHA1

    ab9a7d72ac7cda05b32657827531efd95fcbbe71

  • SHA256

    ed298fdd46b60bf14ff1b5c241bfcbd2fae13ab6e12521801f590b369fa96065

  • SHA512

    056436d8b1500fa7362800b0f14bf540cf810e2297ab7f6d24c16b1609df867c3994938b1017e3b36fd00dffa850943188e15c1364f1f186afc97d25e0845281

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPFoTzDUkWF:RWWBib356utgpPFos

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ed298fdd46b60bf14ff1b5c241bfcbd2fae13ab6e12521801f590b369fa96065
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections