General

  • Target

    ef67c2f0e58f4bb0d218e61119e8b68b1a038bb5a809338b8d7b8ca5e59ba667

  • Size

    2.9MB

  • MD5

    80c3c09a45099f5e211b4f5cce4b8d23

  • SHA1

    5e3be0ac2ed3ecb435f3fdc6438b0f8fe4709a52

  • SHA256

    ef67c2f0e58f4bb0d218e61119e8b68b1a038bb5a809338b8d7b8ca5e59ba667

  • SHA512

    db3e5a4e816faa1b9747427c1c38acd8380d8020795d48f372a57db58ebe3006f051fbf85c738c7c4695cc80edbcb3d59fa05f3b9b21168dcf46f960b5d15572

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrMsWfbNzCQz:N0GnJMOWPClFdx6e0EALKWVTffZiPAcl

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef67c2f0e58f4bb0d218e61119e8b68b1a038bb5a809338b8d7b8ca5e59ba667
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections