General

  • Target

    a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f

  • Size

    1.9MB

  • MD5

    2ec0dc83c7917eba7c8fa38e8740aad7

  • SHA1

    31cab6cda43c4cd61b810ae603de8bfa5a048bd8

  • SHA256

    a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f

  • SHA512

    6212aa7298fabe1ce58680f91cac7235381ac73650156639a8532431c5882852abd6b4ccddf520c9401b2a71118649d92eb8d5786d6e16426f0c3f198ca2d43b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejQCCLtZt4Hpti/3AFhgGrTk3HeQIgcS70h:knw9oUUEEDlGUrMNi/3ADGPrAx9v

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a2fd90e4832710094fd35110c1830056f8a596425adf0d0bac7e3caf8b78381f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections