General

  • Target

    6bb6b9d282af1d6f16253b74375ddfe8958639a8b0b260236dcf4f6a40485c69

  • Size

    2.6MB

  • MD5

    2ff6daa074c2fa7161c74e35d0612f69

  • SHA1

    5dd678f1682b265534aa515523268b50ca957227

  • SHA256

    6bb6b9d282af1d6f16253b74375ddfe8958639a8b0b260236dcf4f6a40485c69

  • SHA512

    0c1dac22c3e785e6249e0084e4c3f67118cf56169985e74828bc7d98f928ae7acb69a75257957e563180ea05af9f02909c074428624d48f7c8d761d599b87022

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUnwwA/B212:N0GnJMOWPClFdx6e0EALKWVTffZiPAcH

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bb6b9d282af1d6f16253b74375ddfe8958639a8b0b260236dcf4f6a40485c69
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections