Overview

overview

10

Static

static

10

d1ee4ee16d...28.exe

windows7-x64

10

d1ee4ee16d...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1ee4ee16d3fcd842580a4c9f7a16079f62ef1a8cf2e597b077300b13572f128

  • Size

    654KB

  • MD5

    040b695d5de3aa720b433ada4019e7e5

  • SHA1

    bf1a95601a8af44a46d44e6c696abe2c72da65bb

  • SHA256

    d1ee4ee16d3fcd842580a4c9f7a16079f62ef1a8cf2e597b077300b13572f128

  • SHA512

    e3d11b323e43dea2126cd85c2ecc3024d5c171a164d39592355d178e5112b9ef3f64e58bb6a6ab05b054f727fef18e20ded7fc265c5c4c5067ea37f8ed52228d

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSB:fsJvQm7sK+/XrmNRlRZmSB

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d1ee4ee16d3fcd842580a4c9f7a16079f62ef1a8cf2e597b077300b13572f128
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections