General

  • Target

    30dedddb310e876e6ac33612e1ae0b0eafec2c51941688126028c1e7e5c8aaed

  • Size

    1.8MB

  • MD5

    dcd0fc03673922156b809a80ed4150ce

  • SHA1

    2a4230a243ac2eb1dd6769b584361108a834abef

  • SHA256

    30dedddb310e876e6ac33612e1ae0b0eafec2c51941688126028c1e7e5c8aaed

  • SHA512

    aaee55e5f0be20877072cba4b5fcc7ad2ece4f9a5756cecbe793b396e91a138a711d75d6cf7a37b06d17f7925f2ea66bb201cb57e17a031fee40f25ab23835c1

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQbOF+sabJKMC+DFm+07yfJX:knw9oUUEEDl37jcmWH/xbnbJo+Jmxs

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 30dedddb310e876e6ac33612e1ae0b0eafec2c51941688126028c1e7e5c8aaed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections