General

  • Target

    0fb243ddd50a17b4e34b8884fdc09e154556f1e19d0c5b4d010122d17106e363

  • Size

    2.9MB

  • MD5

    42c075302f5323ba3c2db1d161fbdbcc

  • SHA1

    d2d7153af53247434f39368eba1d55ef6020d182

  • SHA256

    0fb243ddd50a17b4e34b8884fdc09e154556f1e19d0c5b4d010122d17106e363

  • SHA512

    4a2176b5c423f5c16204ac3c881b30ee56919dd0cf0b7504123bd44c9f513ef252d19613cb923e9e049e5f90aa3e2d4e3608bca5ee3862e56dd00d2f848927bf

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcq4zW530VuT:N0GnJMOWPClFdx6e0EALKWVTffZiPAcM

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fb243ddd50a17b4e34b8884fdc09e154556f1e19d0c5b4d010122d17106e363
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections