General

  • Target

    81be570beb93d617f404c6e6c0b1235d3f1b162e0bdca790ae9af8a1901d6cc2

  • Size

    1.3MB

  • MD5

    e82b57e6eace9907a0c7f1fc3965d6ec

  • SHA1

    c568af982689f20155272069a3ba459b99afc562

  • SHA256

    81be570beb93d617f404c6e6c0b1235d3f1b162e0bdca790ae9af8a1901d6cc2

  • SHA512

    4bd3af873ef875f36589280e3fc386cf091e564031684916f1d398db5983b1e2eebb8995b1a5c63a8ee634407417bd5b7c718ae5acdba558f233b3b0b0c54375

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7De5qv/U:ROdWCCi7/raU56uL3pgrCEdMez

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81be570beb93d617f404c6e6c0b1235d3f1b162e0bdca790ae9af8a1901d6cc2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections