General

  • Target

    256cbb6d4bd018e6ee6e80ebef5ea21a506824bc96393b0a463f83e2b3e13c45

  • Size

    1.9MB

  • MD5

    1afdaa2fbf77025c5914e3ba7bd9c777

  • SHA1

    b7008fd9914ad5c25e470aff286c02eaa599fd57

  • SHA256

    256cbb6d4bd018e6ee6e80ebef5ea21a506824bc96393b0a463f83e2b3e13c45

  • SHA512

    da9e065729c3ef2f47db1a5a8b9ff6e5e88fbbb05bae8dbb2d93b2b7bb229130b96fd38f9015c7feb58c9288cdd1053f3df512e1d66286958642dc2f7ca6fe50

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEd2KUgKmpKDDuIE12:RWWBib356utgE

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 256cbb6d4bd018e6ee6e80ebef5ea21a506824bc96393b0a463f83e2b3e13c45
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections