General

  • Target

    48358382071de144ac52adb4566af28ad8eedf1e6e7a1f1b465c06ec9f35d2cb

  • Size

    1.6MB

  • MD5

    5647e08ca9fdc3d1252c9cb19172a667

  • SHA1

    76ebc3c6937fc1e9abec6d133253701166f96d7e

  • SHA256

    48358382071de144ac52adb4566af28ad8eedf1e6e7a1f1b465c06ec9f35d2cb

  • SHA512

    ed309c4105cecb7b7393dd90d5ac92a80697c7e210d7988a7b420e0bd6e0c0b7117ad6cb3a42e52f77a322e960525c127f02818cc92dff02cbda076a50699a01

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMaMYXocnkVR:ROdWCCi7/raU56uL3pgrCEd2hXnn6dJ9

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48358382071de144ac52adb4566af28ad8eedf1e6e7a1f1b465c06ec9f35d2cb
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections