General

  • Target

    f528700156a589538a1f9f93c67dd458b0ed00c99a6fc7b9ef7c2f5fe2d711f3

  • Size

    1.3MB

  • MD5

    c9365aa901e0ee18d293139d20aa7cb9

  • SHA1

    eb0263a6a0e2c98c7ca2c941a49085fb59dddf88

  • SHA256

    f528700156a589538a1f9f93c67dd458b0ed00c99a6fc7b9ef7c2f5fe2d711f3

  • SHA512

    b974a89687d6b7248b4f0d78c8f1d84f5e7b3a012f2c4926f4552f62470f64be0a71c6302b8b6514dd54149f92038417de5fe82a98a74328107f939eb00f2856

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFu3PzZtvIaUniop03btkMp/qu:ROdWCCi7/rahOYkZtg94p7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f528700156a589538a1f9f93c67dd458b0ed00c99a6fc7b9ef7c2f5fe2d711f3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections