General

  • Target

    fb6202b1ea159463d374609185d801b9382faff0b4b08989b0136e32e012df4d

  • Size

    1.8MB

  • MD5

    167e46070ad067f10bec434da597c0d6

  • SHA1

    43012856bcbb0aa89e4625964804215d30270f44

  • SHA256

    fb6202b1ea159463d374609185d801b9382faff0b4b08989b0136e32e012df4d

  • SHA512

    c0b816201996b1c6894ba20c096d4bd944135a3a15c91c08bf67139b92f26aa8759ce2325f19a4f251c51c629281ff4c9f0ef2eff7b4940515a49e9ab177c3d0

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQW/zFdD+m+ucx:BemTLkNdfE0pZrQZ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb6202b1ea159463d374609185d801b9382faff0b4b08989b0136e32e012df4d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections