General

  • Target

    ab5253afc1a44452451bda9505cd729e4f8dfdfcacc7639f6cf99fa04d2600ec

  • Size

    1.3MB

  • MD5

    d38e9a3754693c8e052a895b69b554a1

  • SHA1

    081f889ff44897777484844c133d5d41e1022c12

  • SHA256

    ab5253afc1a44452451bda9505cd729e4f8dfdfcacc7639f6cf99fa04d2600ec

  • SHA512

    dbfbeb9147bb771e0d73f725932eca2f0e6e7c8ac39e95e7b54120149430ee2e93aceef6591f0428b0ccc3409451a351ad95f1b579b00cf41c9489a2e12e41ea

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqb29xAmfXON:knw9oUUEEDlOuJc5cMK297w

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ab5253afc1a44452451bda9505cd729e4f8dfdfcacc7639f6cf99fa04d2600ec
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections