General

  • Target

    70e3fcefe4eee8f370cbcae8a1b9f1fb760cc01e9ff91fd902a4d03b175695ba

  • Size

    1.2MB

  • MD5

    5e74dd780e22516845751cc825a3b473

  • SHA1

    0c2d754fddf8d23c598ff7bdc314a9a1445f6e98

  • SHA256

    70e3fcefe4eee8f370cbcae8a1b9f1fb760cc01e9ff91fd902a4d03b175695ba

  • SHA512

    640965406e1912a0e8c0e1bb9bc9308a7734399e4285f7fb1bfb3d3be8f83e07977d87912784f67b840c5aa640d41c1168f62b4781c2db27832b2359da98bb7c

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6OBC6y90Xli7w4G8h9HWrYAQW9Ot1Xi:ROdWCCi7/ra7Kr5KOy

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 70e3fcefe4eee8f370cbcae8a1b9f1fb760cc01e9ff91fd902a4d03b175695ba
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections