General

  • Target

    d173eef610adaf7927f1a8dc5b012d9954e40ce8aaa3dd0572ee7fd78e1730a2

  • Size

    2.6MB

  • MD5

    af1140dcb2edbf12845634a257346d51

  • SHA1

    69c79749681a7b57b43e50170529c7947f128d93

  • SHA256

    d173eef610adaf7927f1a8dc5b012d9954e40ce8aaa3dd0572ee7fd78e1730a2

  • SHA512

    6ee19f55a4ecf10e4a63df25dc069ec7834b8f57d10a4f36b200a5b0d06b5545441592abf28ac2868a0d0b8ba29a07f747a9d5e791f06768c56b5154d257e5ac

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9cmOEZ:N0GnJMOWPClFdx6e0EALKWVTffZiPAcm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d173eef610adaf7927f1a8dc5b012d9954e40ce8aaa3dd0572ee7fd78e1730a2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections