General

  • Target

    fd5ce5bcfd6d499c1c7182eaa69f99b6f1e1a9f02470bd0a123432004b4dbe74

  • Size

    2.1MB

  • MD5

    ff9d0078ae5a54555fc7e1a29cc51c9b

  • SHA1

    448d8977729adb275a4062d0b90f5ac65d73885a

  • SHA256

    fd5ce5bcfd6d499c1c7182eaa69f99b6f1e1a9f02470bd0a123432004b4dbe74

  • SHA512

    8320afb990879c174586d6724d4d342f3098a7b974bc164e9493c8eedc9750ea51a3a4eaf126bad3e1849023c8ff3dd63b00fc3822d6251c47b6a63ee5cc1b17

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQlqOdgCuDIck:BemTLkNdfE0pZrQF

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd5ce5bcfd6d499c1c7182eaa69f99b6f1e1a9f02470bd0a123432004b4dbe74
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections