General

  • Target

    40aa5f75c14074dc3782d709a6d98a81468c39895cd2fe3b11b5079c205a0de9

  • Size

    1.4MB

  • MD5

    122e0ed734a2faa13718e75fef09aa67

  • SHA1

    a9309c08a393bc12584bc69ef8608aa15934597e

  • SHA256

    40aa5f75c14074dc3782d709a6d98a81468c39895cd2fe3b11b5079c205a0de9

  • SHA512

    d37105096a12bdefca074348869a71b604c15b384a1b107b402c630e4a40449f8ef61863edb117de8c90609ee049ba6e7cbe2ae25a37baac98a88bd2e910e5fa

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Ropm6eTxC1UyRWtb0dfMS9nX:knw9oUUEEDlOuJzyR7pF

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40aa5f75c14074dc3782d709a6d98a81468c39895cd2fe3b11b5079c205a0de9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections