General

  • Target

    c8ca65b413fdf2a3a6a16e7796ebb9810ba4d13e71eb1cd5e145a981c3de7d72

  • Size

    1.5MB

  • MD5

    68fd296db568021032a005c3b5df5d61

  • SHA1

    b8de58e72ad85a1f46998e35e39963789c73236a

  • SHA256

    c8ca65b413fdf2a3a6a16e7796ebb9810ba4d13e71eb1cd5e145a981c3de7d72

  • SHA512

    9f7c4cf32a03317594bba141010f234b0e49b81e3f63c9e22bb2b50aa8229667cb72f761a72f1cce99034b6a59eda2a1b6f187bb1788a18a436133775229209d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7MdbCbc5wJ+P1Ku/woafpQ47+ob:knw9oUUEEDlZMVyc5KwJ5a

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c8ca65b413fdf2a3a6a16e7796ebb9810ba4d13e71eb1cd5e145a981c3de7d72
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections