General

  • Target

    2b117cad1bf8b55d644e1d6a21f66a1eed730118cae79cfc2f31e6f6fc0c0a05

  • Size

    1.3MB

  • MD5

    a5cfcf13e5b8137dfd565051bd38c1c0

  • SHA1

    8a896012d4b3315313eb76b71972f0885b25142b

  • SHA256

    2b117cad1bf8b55d644e1d6a21f66a1eed730118cae79cfc2f31e6f6fc0c0a05

  • SHA512

    53abf3809c835ed4ceeac17a71b49ce141a84eb613d0b5fc0f8867ec4efc944df80d7542c7ae89fddff5f0733455006ee50438f9a5024ab14a8dae5cd76ddfce

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMIo/TbGwfgmbqcOZTvOHvSKgWvRN:ROdWCCi7/rahFD2PEbXdO0r

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b117cad1bf8b55d644e1d6a21f66a1eed730118cae79cfc2f31e6f6fc0c0a05
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections