General

  • Target

    99a31152db30f1077586d7facccf22ead13872bd7fd9a7b30fefee9f6c090fe6

  • Size

    1.7MB

  • MD5

    30127937b5ac6bf9e4d35e1a37319927

  • SHA1

    5f0ba30a552ed535e43ea01b00cb3477a3f9bde7

  • SHA256

    99a31152db30f1077586d7facccf22ead13872bd7fd9a7b30fefee9f6c090fe6

  • SHA512

    38598fa17149d02154e3064c7345153ff70798d7b1656db2a64c3c234ca7300c1e673f49cabfae8c1745534e942fa417a434ac5489c14d26927661b737e76bff

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMaMYXoFR/sL:ROdWCCi7/raU56uL3pgrCEd2hXe/s7n

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 99a31152db30f1077586d7facccf22ead13872bd7fd9a7b30fefee9f6c090fe6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections