Overview

overview

10

Static

static

10

e3f1d8d9d4...a8.exe

windows7-x64

10

e3f1d8d9d4...a8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3f1d8d9d43dcfecdd2ebce7d06dc84ba8f895354d9f96138cb553253ec6b9a8

  • Size

    1.7MB

  • MD5

    04bd23b1feeb2d35eb7eb0fa02659eea

  • SHA1

    f68e64c72c5231da3703778f725502d6cb8ae6bf

  • SHA256

    e3f1d8d9d43dcfecdd2ebce7d06dc84ba8f895354d9f96138cb553253ec6b9a8

  • SHA512

    c630747a449bbbaa7cf8e6f056d25ac31cf4542433d9a3235ade0a8261b712a39dfebb423f25fe73ea5032aad4dc1c803fd3ac0b200fb637853bda94a0990e1d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgc3uNdEqnyeAMtljO0:knw9oUUEEDl+xTMS8TgnnpAMf

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e3f1d8d9d43dcfecdd2ebce7d06dc84ba8f895354d9f96138cb553253ec6b9a8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections