General

  • Target

    0994f627041604ded9df6325a6330c05862739147ef63cea4a5651435f665192

  • Size

    1.5MB

  • MD5

    2ba7b2693c2b03317a1f3c9d9bc6b010

  • SHA1

    cbecbd75e6988a13fb2f01a97d32df23d4ecdbec

  • SHA256

    0994f627041604ded9df6325a6330c05862739147ef63cea4a5651435f665192

  • SHA512

    08cb59f504e5a5608eeed195a5fd6a5646537f1f7ac5075fac685425809ddc0a036f80b105c9f6684180cc16faa97e0bc7d9a3a84401cb07e61e6424d33f7fcd

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwJWe9pYJh5MHHRDQxgSvyH0n+dzBCzjWtwk3z:ROdWCCi7/rahoyBcIKH0k8Wl

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0994f627041604ded9df6325a6330c05862739147ef63cea4a5651435f665192
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections