General

  • Target

    3d6f66274b54e219e51d6aa03f971a08ff44bc01afa28d0bfb2c3b29aeb9b99d

  • Size

    1.5MB

  • MD5

    4f5ed896569964cfd093bcb838ce94dc

  • SHA1

    9a08f979c09e6de4e15ea266b9c3b1e771627f87

  • SHA256

    3d6f66274b54e219e51d6aa03f971a08ff44bc01afa28d0bfb2c3b29aeb9b99d

  • SHA512

    d4255cef05e3148ebf77ccea6ee1ecf342a0ed505f4b79def6c062943118256deb33dffb0b465b3147142096f2244d51a9583603afab20be317eca900905b26d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7MdbCbcKmsquc9EuFH7Pl1ZgotluOY+3i:knw9oUUEEDlZMVycKmsgPlum3i

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d6f66274b54e219e51d6aa03f971a08ff44bc01afa28d0bfb2c3b29aeb9b99d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections