Overview

overview

10

Static

static

10

c28da04658...20.exe

windows7-x64

10

c28da04658...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c28da04658e1824d12aa65d84fd7bca217606fbf243abf74205e46a983885420

  • Size

    1.8MB

  • MD5

    3d68c2abf0e52503c98eae8cb3be9879

  • SHA1

    745f51c9e6edd0a79d386c9907896bb888b09188

  • SHA256

    c28da04658e1824d12aa65d84fd7bca217606fbf243abf74205e46a983885420

  • SHA512

    1e6ce2096b393b106d989f471662814a9ddfc8d405b452b2fdae7e5b9a6b66b41344c53db6b8cab9b962a22c67ead4b7ffef3ae120aa78451735843b80c3a517

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XI8uAT5/e96ApSzUICNdHzfMTwQ93+cdTHPh:knw9oUUEEDlGUSuAQSzCTCwQ4a9

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c28da04658e1824d12aa65d84fd7bca217606fbf243abf74205e46a983885420
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections