General

  • Target

    ea799dfc8c50dac923f0f5d859ec9411e10965ff8744285f38e14b377e3c1e72

  • Size

    2.3MB

  • MD5

    f03e7ffdda14249792a2f5c0c2faae2a

  • SHA1

    528529c0fe5a48a4b5e45f1a9d5d47363d555a3b

  • SHA256

    ea799dfc8c50dac923f0f5d859ec9411e10965ff8744285f38e14b377e3c1e72

  • SHA512

    064d3a6630bbf72f82656af24b5a78ee07dfd4a94aa2cb689d8b3aa7b77558180db28726dca59bbe566762bffb813fa954bdc263ab71337f657c5eea5e1dff0e

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5/xFGxiB7+J/i:BemTLkNdfE0pZrU

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea799dfc8c50dac923f0f5d859ec9411e10965ff8744285f38e14b377e3c1e72
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections