General

  • Target

    402f0fa5aeae8ce09b3d8e18fcac602e3fa52fe6ed7b702e20fc9aad92293ed9

  • Size

    989KB

  • MD5

    37a15b3de56e68867daa96c11633b0d4

  • SHA1

    5f7d67ba09893397364bbfb021b007ef064599a9

  • SHA256

    402f0fa5aeae8ce09b3d8e18fcac602e3fa52fe6ed7b702e20fc9aad92293ed9

  • SHA512

    a63c3f1d0a8b251e371e1a7cc1f24ae821eae5155d61c9ad49cf4b74b5c08d3d8c0bb02375d6b981517cf83dcc2b461068f94a4ee69eaebaaa9427fbd97cdb46

  • SSDEEP

    24576:RVIl/WDGCi7/qkat62wTlvck3AWsu4JFXLyFR/iD0OYXJu:ROdWCCi7/ra+xeHNNOv1OYo

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 402f0fa5aeae8ce09b3d8e18fcac602e3fa52fe6ed7b702e20fc9aad92293ed9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections