General

  • Target

    dd9c28df6403130046ded44a3aa4a316839df7d8dd568709cd1b89c92f730778

  • Size

    1.4MB

  • MD5

    0b4051e36253fed4df9f3943459bd4ca

  • SHA1

    02cf4d3e23c9c8bba8d6b34247faba769bb9a8de

  • SHA256

    dd9c28df6403130046ded44a3aa4a316839df7d8dd568709cd1b89c92f730778

  • SHA512

    cf2a9bf2fd09163845d2b4f56ef04c29847d6c8ae0090d98ed9f0cf7d62c7b6825a0721e35a4684e8ac8d2c8a630a945443deee2a2aec149e4b7921a9feb60db

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqDWzgqsmJox1fLt8K2PzORNnkQb/j:knw9oUUEEDl37jcqDrUS1pR7

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dd9c28df6403130046ded44a3aa4a316839df7d8dd568709cd1b89c92f730778
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections