General

  • Target

    3931a11651a6f38e9590ee3dc3f666766a61e99cf224fcb09a207433aeaacaab

  • Size

    1.4MB

  • MD5

    e4c27956b1af5e692dff2eb788a4e024

  • SHA1

    590144c9922120749605098368e282caeb4a5db2

  • SHA256

    3931a11651a6f38e9590ee3dc3f666766a61e99cf224fcb09a207433aeaacaab

  • SHA512

    b2b43c5ce2abfbf2d7b56eb637d528a253e05784a77df9aee882012177e068c4a76d748bf9131d615942353b0da99c9685b5c2ec8d2ad144109deb0f43e76857

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727itqTgtkFKifDqsj+nCGUtCPQJU7GbTvLvdN1NB10i:ROdWCCi7/rahSUCCz+GbzRNv82+/m

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3931a11651a6f38e9590ee3dc3f666766a61e99cf224fcb09a207433aeaacaab
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections