General

  • Target

    4e2884f55a6578dc19a2ca41d3b9fa48f8147ffb3734404856a5e18529cf6391

  • Size

    1.7MB

  • MD5

    c591b0ad4c3ba26448bec3ddfc2d9b31

  • SHA1

    718da87444db3d52f27e9da858211577995e27fd

  • SHA256

    4e2884f55a6578dc19a2ca41d3b9fa48f8147ffb3734404856a5e18529cf6391

  • SHA512

    e96f18a7c7a19a7f1007b6d2a084dcdb00b3798522c2e1221d1569aec220f1a143f816dc7b1b6151f6c6312d897bac73de6f7e1c79d361aa049b4a2d75e763d2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7EdN4scYz31DGcNr:knw9oUUEEDl37jcqMHdqscCgx2ff

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e2884f55a6578dc19a2ca41d3b9fa48f8147ffb3734404856a5e18529cf6391
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections