General

  • Target

    0fa0c202bb3ef5fbacc11873fa473d3d1583a4bc21c03713dec82b0b4c88d295

  • Size

    1.9MB

  • MD5

    e4b81a75bbd316b8a7c910a9c895322c

  • SHA1

    3ae14fa6d3acdfd86b92a0c204d2376b49c2825b

  • SHA256

    0fa0c202bb3ef5fbacc11873fa473d3d1583a4bc21c03713dec82b0b4c88d295

  • SHA512

    a9a25ba4526e63cbfe6259c9f46d7b710fb26b18e8d9943739477a0830f9c14abf2d4213e0fa1c322830021a3e7fff3e0c6a99d1f1c49c5951b681b7f3e0e10d

  • SSDEEP

    49152:FGUzr9GOWh50kC1/dVFdNaeUE3LqW1T/f5iBA9R86DHVVzP7ffQmSY:FG6r9GOWPClFdNaeUE3LqW1T/f5iBA9P

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fa0c202bb3ef5fbacc11873fa473d3d1583a4bc21c03713dec82b0b4c88d295
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections