General

  • Target

    c1075e06e0e58d4f113c2b1038869cd2ccb0178be5a645463f6ad996666c7d8d

  • Size

    1.0MB

  • MD5

    6c4e2dcfe0d67e4f6645bced847eb68f

  • SHA1

    6e23f83417d9a29aa4724e39ae97892f201d1bbf

  • SHA256

    c1075e06e0e58d4f113c2b1038869cd2ccb0178be5a645463f6ad996666c7d8d

  • SHA512

    a38f5b1a3ddc8bc07f7c513edc2ea603ce8b93b99c53cc4474de1fb88681b723a7c5bd73a03f8a6d45684bc2e9a8de3b504d51d0868854ce7c58547dae734fe6

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFs1XllvB5zJsaF:ROdWCCi7/rahOYilJ51su

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c1075e06e0e58d4f113c2b1038869cd2ccb0178be5a645463f6ad996666c7d8d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections