General

  • Target

    c0fcf1ab3c85f3ad32f33b5d1c59cf1200a041b297e7f805e5f32f4cb9d2bc22

  • Size

    2.3MB

  • MD5

    936f2627814914a481b06516df5ae8ad

  • SHA1

    f90209717bf4a499850d8180f5544539811605c0

  • SHA256

    c0fcf1ab3c85f3ad32f33b5d1c59cf1200a041b297e7f805e5f32f4cb9d2bc22

  • SHA512

    cdb914fcfbea25faebe723f9774d8cac330fba864328ed8dad6590769e2dcbb8bbbdeccf613032a0866df7b225c8583f17e544948e2fd25c50f192a03b32d858

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzeaEUEj:N0GnJMOWPClFdx6e0EALKWVTffZiPAca

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0fcf1ab3c85f3ad32f33b5d1c59cf1200a041b297e7f805e5f32f4cb9d2bc22
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections