Overview

overview

10

Static

static

10

34abfc39bb...80.exe

windows7-x64

10

34abfc39bb...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    34abfc39bb211e79c58cd2b5ef581f9018789ec26149656b420005294ce6da80

  • Size

    2.0MB

  • MD5

    e3cd3012030a336b51079a6481af1d76

  • SHA1

    5dbb49ccd8e34991bf30e9d3b917325beca12571

  • SHA256

    34abfc39bb211e79c58cd2b5ef581f9018789ec26149656b420005294ce6da80

  • SHA512

    3487ba9a2d8b7cd712263c61cfd35db4b74265380a489fefb1b86e3cd5ab944d02a52bcaa6e46190c13ce5bfc1cebae997368c08182991638cf66ac923f0e72c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOMDq9tiisv7ZB5EdxsXu1Di:knw9oUUEEDlGUh+hN5ozZWxY

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 34abfc39bb211e79c58cd2b5ef581f9018789ec26149656b420005294ce6da80
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections