General

  • Target

    025884e3575602f5f1906e7cda3142a3f053ccc3b86144deb8a794ed9803a140

  • Size

    823KB

  • MD5

    1046f4209b6dbb2ebd9d77521ab8c68f

  • SHA1

    70803c0a79115a299c234b373a9d2902d3204994

  • SHA256

    025884e3575602f5f1906e7cda3142a3f053ccc3b86144deb8a794ed9803a140

  • SHA512

    596df7c9acc3e33f04fbf0ff5627b1c6421ef2f69a79546f0d048b70692d49e5de6c98bc72cff967e9c2c6dabef0b6b042651d8a3f366bdad31f412473c3b473

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3RTppYXT60MvtxgPi54:JanwhSe11QSONCpGJCjETPlWXWZdvu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 025884e3575602f5f1906e7cda3142a3f053ccc3b86144deb8a794ed9803a140
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections