General

  • Target

    5b144a49213069af580a5763f48dc19c2cba6e6f5bf9cd2752e1e7e53df3c7c9

  • Size

    1.6MB

  • MD5

    7829124554a5ff1eee14871d8b2559ce

  • SHA1

    c1ac0330f7164be8eedd21bf83a6e65ef5cc2872

  • SHA256

    5b144a49213069af580a5763f48dc19c2cba6e6f5bf9cd2752e1e7e53df3c7c9

  • SHA512

    a111c33cef3fc181a8f16643eafb5142b1fff543359dc74f78ac5f661fb8bd33cb9488955a3605d6868cf85c933426ed6f373c1166cca9d877e77e3907cfdda4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB92ofc6qjw/DLVwUPJ+mqGjMDD:knw9oUUEEDlnCNGofbLVzMLJl

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b144a49213069af580a5763f48dc19c2cba6e6f5bf9cd2752e1e7e53df3c7c9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections