General

  • Target

    lsma22.exe

  • Size

    1.6MB

  • MD5

    d6f8c66d27fa8d4172399afbfbce6975

  • SHA1

    26d18c40addc5d4866b3feea288a83cf10f56bf0

  • SHA256

    ba1e190e87d89ff7943cca039f357ca8e7c37255d51accf49393e2f9119dec04

  • SHA512

    03b44d450353f3b621c49e25a0ab13c449792bc2fc94b91eeb9c432e0d813b7b233354d6a332a8ae42a92a743eb3ff6dc00256d2fff58604146c23a8d9068916

  • SSDEEP

    24576:pa+dNwIWqdU5ck+uowHu1Hos1RbgMXm4HYu/3s0hUieJZ2erhHJSMRHtr8+DaTXZ:pa+BWF5LoYu1I1MXOuvCNdHzRpFsXJ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • lsma22.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections