General

  • Target

    d5f5870f36d198975f1a3907842c68dce34a2928ddec509069619f41d56c1357

  • Size

    2.4MB

  • MD5

    3083dd772f55a39d7a8882bb05ed6e22

  • SHA1

    5b3aaf3cb98cd86e4156982e4e4e71752176f1f9

  • SHA256

    d5f5870f36d198975f1a3907842c68dce34a2928ddec509069619f41d56c1357

  • SHA512

    4ee21dcd45574d3a0cf30ef6167fcaf73aff4cacc85b35ed8c3549b4a5de1f5a2b45ec23fa366d5ffa15cf77f4c363ac1bdfb82a270a9485901afadf64a398fa

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmSd5frdkcVV:BemTLkNdfE0pZry

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5f5870f36d198975f1a3907842c68dce34a2928ddec509069619f41d56c1357
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections