General

  • Target

    341efe8bf30483fe8c6d5bf7fc299c2d985081061a1b3a18fd8ec923f4bc419b

  • Size

    2.5MB

  • MD5

    f602f3a45b369ef95eae75664a4637b4

  • SHA1

    35c6c470f2e2adadf8d51f6309de24fa8432062a

  • SHA256

    341efe8bf30483fe8c6d5bf7fc299c2d985081061a1b3a18fd8ec923f4bc419b

  • SHA512

    5a08fba8a22eaaa90308976280574d49bb080b37bb5ddbfa98ddeb0461c6637e65ff4ce5065f1813f4764e9051e8a9f0e5a0fe6e40085c8ea0597ec165d65ef1

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzchTcZ3Yp+OK:N0GnJMOWPClFdx6e0EALKWVTffZiPAcp

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 341efe8bf30483fe8c6d5bf7fc299c2d985081061a1b3a18fd8ec923f4bc419b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections