General

  • Target

    c29b7014c1c7863814d26a4da4fb85363dcb15920efdb2cf6086140c116e1e0f

  • Size

    1.5MB

  • MD5

    b3cf9ecc0471f8b460d0109c9fa0347e

  • SHA1

    a5c800485cfa0a5cd3f7a6c991d8f3eb3cea9ed7

  • SHA256

    c29b7014c1c7863814d26a4da4fb85363dcb15920efdb2cf6086140c116e1e0f

  • SHA512

    460a10fdf4a5b7b5b3af7811604b82aaec09366780bdae38d9d803852820ccab18a1bd97720c09390d8eafeb55564ba4165c2844f6cf90d3666b7e936ef5e725

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFs1XllvB5zJsSsyKB2FVj3CA:ROdWCCi7/rahOYilJ51sr8FNx

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c29b7014c1c7863814d26a4da4fb85363dcb15920efdb2cf6086140c116e1e0f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections