General

  • Target

    b5118e6fc618a2ae4c5564adc60a860b7613ccba30c661c26f760fbcbaff52c5

  • Size

    1.4MB

  • MD5

    90303933bbf377c7bf2124e10a994b2b

  • SHA1

    0869d200e5c327434dfb14675d9f936e1454f18c

  • SHA256

    b5118e6fc618a2ae4c5564adc60a860b7613ccba30c661c26f760fbcbaff52c5

  • SHA512

    79e4ced003889146424845e0bf6838ba9fe950549ff53a5ef0a0d95fe2f7f77c8fd95e783e738b15e83e313dcd34aaf35ae0e272e3614ef59f297ed6c02588a2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlW6m3pPu6Cc+gujcae7paq+AzGG8rSo559Jjpgh7:knw9oUUEEDlM261ui8l3c7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5118e6fc618a2ae4c5564adc60a860b7613ccba30c661c26f760fbcbaff52c5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections