General

  • Target

    1656c4ae9f06058edec86b2e2316709ebd54ece18d280eaf3fe3f0df908b9393

  • Size

    1.1MB

  • MD5

    40c24affaa0e628db8a512eafe0a023e

  • SHA1

    534738e61acd0b100c67b5411154d562985f3536

  • SHA256

    1656c4ae9f06058edec86b2e2316709ebd54ece18d280eaf3fe3f0df908b9393

  • SHA512

    293eef8ff3fedc6922eece48962c0ac20c5959b1a1a24f62ca1d9f3264b5d546d71b36fe4b971c6d710481c45641590d78d1b81f43f7526527951a170d5991e0

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mO:knw9oUUEEDlnDwq6Sd0R7qV2b

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1656c4ae9f06058edec86b2e2316709ebd54ece18d280eaf3fe3f0df908b9393
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections