General

  • Target

    4ff64568e98caa374c6a31b1343d5cfb3fdf619bec5fa5a909e7959040b04fc3

  • Size

    2.0MB

  • MD5

    19a192af2155df97c50e05edf52b3ca0

  • SHA1

    88791707043e33e347f9bcdf8c630ef294431514

  • SHA256

    4ff64568e98caa374c6a31b1343d5cfb3fdf619bec5fa5a909e7959040b04fc3

  • SHA512

    9ba223b62b3ab453f606de8ef51eedb4fd618ddfc27c63ec4ff3f7e8330ca2095d2f693b445e3ef989878f2b6ce41285b329746313df1932029a5dfc64ac0f20

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQW/zFdDrAReddp:BemTLkNdfE0pZrQo

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ff64568e98caa374c6a31b1343d5cfb3fdf619bec5fa5a909e7959040b04fc3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections