General

  • Target

    41f0c540e9e67d80ff49a415bcd99bc0f725acabe3692a55a7d443cf634232e9

  • Size

    1.7MB

  • MD5

    0e9b41e7c6358e5c9f09be343fa71058

  • SHA1

    372f0f90ffd18ff5d05747d3955837c6842e5ec4

  • SHA256

    41f0c540e9e67d80ff49a415bcd99bc0f725acabe3692a55a7d443cf634232e9

  • SHA512

    d1227578fff17a00f69c07fc876c5966d5cf745554f81e8de066095e52ddff138589b72f60721ddc4b45193be7635931326d7479d3d5e914ced87b84322e53c4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zMWfmDzrmXYVCY+li7Sa60kRoD2GXG:knw9oUUEEDl37jcq4QXDT6hXi4YL4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 41f0c540e9e67d80ff49a415bcd99bc0f725acabe3692a55a7d443cf634232e9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections