General

  • Target

    2b281dfbe30bcfeb8d5c5a47d32114f9a9dabd447d9541703f6d54a40dd56e18

  • Size

    2.0MB

  • MD5

    a980893bf1537d0c53a56bbce62e02cc

  • SHA1

    3200b8c03104319fed974931ab47902567004984

  • SHA256

    2b281dfbe30bcfeb8d5c5a47d32114f9a9dabd447d9541703f6d54a40dd56e18

  • SHA512

    35987172c1cea049e503c72d9c0c115e23700e0ed4779dd270b55d86338679667700c9afffb4765d94295792192f446bc42156855f60d64969bb446bbdec8098

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQOY2UrwUvm3:BemTLkNdfE0pZrQc

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b281dfbe30bcfeb8d5c5a47d32114f9a9dabd447d9541703f6d54a40dd56e18
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections