General

  • Target

    c21b0b248d7f12af88bb9782787daa3338057fbf3ec0c4624fa99c2a51e7fc33

  • Size

    1.3MB

  • MD5

    ee8ed22496e6bfe2851f9c20d3b7356f

  • SHA1

    157919f21ff91fd34dd5bb3fd1a013a4f8c8f7f8

  • SHA256

    c21b0b248d7f12af88bb9782787daa3338057fbf3ec0c4624fa99c2a51e7fc33

  • SHA512

    375ac68003e11ee4cd17540d9d7a41f2d446adc2e6025d3ea4dfd75fcc063e9421eb2db95e8b17f4ed0a0211189bb33b2b28bf36bb5e6e323cdb7f176d9d5289

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQaAhnebqn+hmg0wl+PW9p:ROdWCCi7/rahW/zFdDrAReDsVk

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c21b0b248d7f12af88bb9782787daa3338057fbf3ec0c4624fa99c2a51e7fc33
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections