General

  • Target

    5fa9d3760ade419356eda953704cd0b9247e9300f93525a9bd9cb64ef5bed9c4

  • Size

    1.1MB

  • MD5

    c6257c966368c42b138da8a959b2be68

  • SHA1

    f91313e87025150b28203ff65704669eeb2b7245

  • SHA256

    5fa9d3760ade419356eda953704cd0b9247e9300f93525a9bd9cb64ef5bed9c4

  • SHA512

    587e870fdac98353b50aa25f926f83333da9aa54fde39626a202c615fcac04902424debdd41378c6a8de60a885e3f80522933845ba7ab541d60d520a07066602

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwWZ2ePk1zfQIssfNkDwHNXia:knw9oUUEEDlnwXafJsl+NXia

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fa9d3760ade419356eda953704cd0b9247e9300f93525a9bd9cb64ef5bed9c4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections