General

  • Target

    cea25191b892c802514b4c2245cb61f7e85d6e625d2f681ef269c0ac6335eba0

  • Size

    3.0MB

  • MD5

    20fbe1f8c6eb2a6931e45826908f2317

  • SHA1

    d0bc1f5e5722725fce1ff5097b42c61a4b468fa2

  • SHA256

    cea25191b892c802514b4c2245cb61f7e85d6e625d2f681ef269c0ac6335eba0

  • SHA512

    349d10be12bdcf314cfb5d9afcc8d3a1b859d7d08c682c6abd807b4a7904cb6dc7225f1ae0f4cd9f238ba014561f6816f599e328fd6760772d69b7760045ae0a

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9ctYVk6/DT:N0GnJMOWPClFdx6e0EALKWVTffZiPAc8

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cea25191b892c802514b4c2245cb61f7e85d6e625d2f681ef269c0ac6335eba0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections