General

  • Target

    6f4b0163de262ca3c52b7a205dbd2330017ac859fa0d052ff73a9d3ae0301e9f

  • Size

    1.9MB

  • MD5

    fd82dace4d6c5b6bc899e2300bb81879

  • SHA1

    248075f67978250b6d6001fd9155be854f9f73e8

  • SHA256

    6f4b0163de262ca3c52b7a205dbd2330017ac859fa0d052ff73a9d3ae0301e9f

  • SHA512

    9958ce93d5036ddef19fb2312dc9a767c774fc428af18b015471705642915a4f1eb71c1f7de0248b854f3bbf2e8f240722e2aba8092af87a9c4275bb56fa8286

  • SSDEEP

    49152:ROdWCCi7/raU56uL3pgrCEdMKPFoTzDZw4:RWWBib356utgpPFoX

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f4b0163de262ca3c52b7a205dbd2330017ac859fa0d052ff73a9d3ae0301e9f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections