General

  • Target

    867bb13a9f344a7a8b45949724c10f2601a15878a08aa66d2c307a4d209fbbf2

  • Size

    1.3MB

  • MD5

    37bbdaba290858a72e04f6c3215645cf

  • SHA1

    181314bf39913a91738df8a43a5c2ead36f99f38

  • SHA256

    867bb13a9f344a7a8b45949724c10f2601a15878a08aa66d2c307a4d209fbbf2

  • SHA512

    bd415d7f520da753ce1cccdbf8aa476887239b204af46d374b4808c3067532b13bc8433ba2e7c47f59eed5ab7149a66f029f35d87f14d0422942a26dadfcb116

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiMQy0AVu8L9gQqXxLyT:knw9oUUEEDlGUrGiMt3j

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 867bb13a9f344a7a8b45949724c10f2601a15878a08aa66d2c307a4d209fbbf2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections