General

  • Target

    f3752d4a5e699491f9c6797ae8db4d2e85087e07bf8e8ca072badfe94a0b2b74

  • Size

    654KB

  • MD5

    4724b9bc9cb1281243d6c87b79c8246a

  • SHA1

    106af4f3e81e28b04be9f6be99590134757ba9ad

  • SHA256

    f3752d4a5e699491f9c6797ae8db4d2e85087e07bf8e8ca072badfe94a0b2b74

  • SHA512

    0ba4bbc31a8768a81489e14c4e51cccf334a85e9267a1a71927ec4d63172b2ffaa9c4dd3ec7ed820da483018a9627d48b7852955b0854dcbe9187c44c5b7055d

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmS6:fsJvQm7sK+/XrmNRlRZmS6

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f3752d4a5e699491f9c6797ae8db4d2e85087e07bf8e8ca072badfe94a0b2b74
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections