General

  • Target

    2924c83068b36706200f9320cb75fb89f04403e2fde7d966354caaf6f4d0b899

  • Size

    1.8MB

  • MD5

    0d86e42feaf5583a7bb8735c0ac16dc8

  • SHA1

    cb262efb2f4402f6d3be7b1efb9bb136666b0120

  • SHA256

    2924c83068b36706200f9320cb75fb89f04403e2fde7d966354caaf6f4d0b899

  • SHA512

    bc95c82462104e1f16ca0cd69ab0a90ef184fb069cec00138fddd6d0a1f12e4a0867fdf507b85341302e49530f2301bbcf4fec1b4359c10740c43e31dab28754

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI68csrEjHiD7NVQ:knw9oUUEEDlGUJ8Y9ctYVk68Nzty

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2924c83068b36706200f9320cb75fb89f04403e2fde7d966354caaf6f4d0b899
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections