General

  • Target

    4a2d2819cefd1b241b3f1fb35ea77b185eb45031a9f312da0897e883bf94b449

  • Size

    1.8MB

  • MD5

    2351619c3eb33b663ae5c57b2ef915c6

  • SHA1

    94ec22b5817666d50a5614120ef6764431265ec3

  • SHA256

    4a2d2819cefd1b241b3f1fb35ea77b185eb45031a9f312da0897e883bf94b449

  • SHA512

    f284a62f039db0307e379a23ac47a6613efe374a8ee37ab4327ed8a9a86a953249b33f2d4545acf94b418e38088d1ded162450fe221593f701eaa2171fab5f51

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgc3uFfWwlA4zPmRmOfGH32e+4cl8rZ:knw9oUUEEDl+xTMS8Tgw0su7+4cOGwtN

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a2d2819cefd1b241b3f1fb35ea77b185eb45031a9f312da0897e883bf94b449
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections