Overview

overview

10

Static

static

10

f4e4794b03...70.exe

windows7-x64

10

f4e4794b03...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4e4794b035223da8c0f0c9ecda15d58a25cd69b53411fa4b4249585c6710970

  • Size

    1.3MB

  • MD5

    a59aa1383b90361810c605cdf163c580

  • SHA1

    3dd162bf1587542b508b527daa05c6fa6e5021df

  • SHA256

    f4e4794b035223da8c0f0c9ecda15d58a25cd69b53411fa4b4249585c6710970

  • SHA512

    15831d9c49ca90723b26140a3afb3727a38ddd567d694e9fdb5fd8487876b1d2d0c0f890b3a6985f11db51a6be362792d275f223c4b0e65dadfd9f2f2f19e451

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t2o4v8c1zNsLTl:knw9oUUEEDl37jcmWH/IlzyHl

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f4e4794b035223da8c0f0c9ecda15d58a25cd69b53411fa4b4249585c6710970
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections