General

  • Target

    8960bcef487d80006713a34c5029d73b37cc1998c1254ccd22ccea4c9f3aaed8

  • Size

    1.8MB

  • MD5

    18dea03fd0532c9d00e34acf816a1a74

  • SHA1

    d0ca75afb38ff58a11aa4d723135a29169c8a839

  • SHA256

    8960bcef487d80006713a34c5029d73b37cc1998c1254ccd22ccea4c9f3aaed8

  • SHA512

    600f9fd6cfe39d0ef6ab9ffe87c637efb108b1c21defce42dc553ecaedbb002205425f90a7d3bc90af09196077d10f46458e966bb19389b2650c9e4eeb38eed6

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQHxxdcvN:BemTLkNdfE0pZrQW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8960bcef487d80006713a34c5029d73b37cc1998c1254ccd22ccea4c9f3aaed8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections