General

  • Target

    e6c4efcdf386476c7faebc6c3ff9e9a85ddb8302dc4aa27a0d0deaa28ffc845c

  • Size

    1.4MB

  • MD5

    9486de08a8a1676eff4bb53f11d18144

  • SHA1

    f3fbafae6574cd1cde594e3c89d4b186862af4da

  • SHA256

    e6c4efcdf386476c7faebc6c3ff9e9a85ddb8302dc4aa27a0d0deaa28ffc845c

  • SHA512

    e4c523290dea4129c27eae04d1e977f8bc991cde9b09ee7ef31ab413ee486ee1f54f29dd54e589ff31fc70c1048cc5046126570a25c2f041387c9616908e127a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGVcdimG:knw9oUUEEDlnJ2k2ojcdO

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e6c4efcdf386476c7faebc6c3ff9e9a85ddb8302dc4aa27a0d0deaa28ffc845c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections