General

  • Target

    f8dfbab1741877945b0f53a19e5b33c92fff92e3835642e292aef723d022d085

  • Size

    2.3MB

  • MD5

    fb51c4e8387b30e26178fffd94916b44

  • SHA1

    d22dfbe11aec13ae815a914ceb8bd0c8725c6d30

  • SHA256

    f8dfbab1741877945b0f53a19e5b33c92fff92e3835642e292aef723d022d085

  • SHA512

    523e7ee043d519ad42bce81c598b81ba3bdaf5cedc3624625282decc11fa3611914b225954c310e6dcb6c1764928bc867678d4f34b38e59c54e26dd9e85b9910

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJv9xQb:N0GnJMOWPClFdx6e0EALKWVTffZiPAcZ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8dfbab1741877945b0f53a19e5b33c92fff92e3835642e292aef723d022d085
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections