General

  • Target

    bab1ed3204dfebf9daffbf68061e7e6701dc7eacdacd5654fa0e231c93c33d9b

  • Size

    1.9MB

  • MD5

    cc905b5e39431afbb3115a68cc186461

  • SHA1

    267cb1bae8af82e96c1433e2250ba6fa60df910e

  • SHA256

    bab1ed3204dfebf9daffbf68061e7e6701dc7eacdacd5654fa0e231c93c33d9b

  • SHA512

    741e6fe728f9b08901fb760a9280ca39565c2f0cbf846fa3faceaa0c7ad71eb856bd59fe2338828c0fd487daf7fb2dbec20cdfec4666f6a61fd90be1e86f5e83

  • SSDEEP

    49152:FGUzr9GOWh50kC1/dVFdNaeUE3LqW1T/f5iBA9R86DHVVzP7ffQmSK:FG6r9GOWPClFdNaeUE3LqW1T/f5iBA9Z

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bab1ed3204dfebf9daffbf68061e7e6701dc7eacdacd5654fa0e231c93c33d9b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections