General

  • Target

    bca2d64ea26333a289e1a0ab6cd50c5ad2d4157c4d56743fa7f205f14c7c9980

  • Size

    1.2MB

  • MD5

    2662062d6a0122842f03e45776050d8b

  • SHA1

    2af6c342d8a38e9a910bf10bc5aac02375a7f951

  • SHA256

    bca2d64ea26333a289e1a0ab6cd50c5ad2d4157c4d56743fa7f205f14c7c9980

  • SHA512

    0b086aaae67891ca2c20e870624dff3f93de819192c3d0d6a32122d84a1db8adfcdb3ade927ec4d3115c6ed911383bd0b8651c530a70a272f0b18a4d2e5bb440

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnXIhz24Gtd8SLiDATSUGG8ZgV67:ROdWCCi7/rahUUvXjVTZLnGZgW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bca2d64ea26333a289e1a0ab6cd50c5ad2d4157c4d56743fa7f205f14c7c9980
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections