General

  • Target

    bd5f3e4be79e4df1bdfc9ee012f82027267e533f1fbfd19fef8849c01372739d

  • Size

    1.3MB

  • MD5

    347bbbe4ffc66f29d06e5e0d727245d3

  • SHA1

    0061fb078027b36ccbe285675357fce262ebd4cb

  • SHA256

    bd5f3e4be79e4df1bdfc9ee012f82027267e533f1fbfd19fef8849c01372739d

  • SHA512

    6eb6dbaa1cd2abf00c630897428227848cd8fef2119c436024a033b06ef3792b17d556dece7bcde88e18e7de5034b8ffbbb2bba8e541cc265254c28372dafc1c

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnXIhz24GtdhUYpAal4jZnwMWmzyh5sj7A2BW:ROdWCCi7/rahUUvXjVTXptRmKWXe

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bd5f3e4be79e4df1bdfc9ee012f82027267e533f1fbfd19fef8849c01372739d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections