General

  • Target

    71e96cb2a06b5ed324a7e28a6898109a76460da3839fa9c07e0c2c9d9f1af38b

  • Size

    1.4MB

  • MD5

    25a3c4a76de47ac9a326cd435cfc2f85

  • SHA1

    edc255682893d82a5cad144fd91c43d109a7a683

  • SHA256

    71e96cb2a06b5ed324a7e28a6898109a76460da3839fa9c07e0c2c9d9f1af38b

  • SHA512

    040981ef4b0ee3888b1670fe85535d6a885d568528498e5da7ee61a3428b05f9516b6883f49b36ad3dbf40afffb2ae60b5b2a6bc48e1aa9e035830d0a51143ab

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMaTH4zxzPE2:ROdWCCi7/raU56uL3pgrCEd2TcFEA

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 71e96cb2a06b5ed324a7e28a6898109a76460da3839fa9c07e0c2c9d9f1af38b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections