General

  • Target

    f32f37a414962f8c724c6b4bd4f4387d9b1b0d1cecb5b9630ce9aa877bf8de9d

  • Size

    2.6MB

  • MD5

    22ec199437d31dae2dbdc560b0778158

  • SHA1

    45192287b1e773af81b9548109b9794f1b45fdd7

  • SHA256

    f32f37a414962f8c724c6b4bd4f4387d9b1b0d1cecb5b9630ce9aa877bf8de9d

  • SHA512

    a05b36567b2ae65eaf9b2e2168e8ef6600a36a5ebde09970def5e2970af7bb32a756af3e115efc27976bca7011ddd5fe19cbb16447767766c4bf068f20bdf9d4

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrMNcbd:N0GnJMOWPClFdx6e0EALKWVTffZiPAcW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f32f37a414962f8c724c6b4bd4f4387d9b1b0d1cecb5b9630ce9aa877bf8de9d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections