Overview

overview

10

Static

static

10

ff7c060084...8a.exe

windows7-x64

10

ff7c060084...8a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff7c06008458a4b128bcff677e392b9a10bc661fa9216679fff22e6918584b8a

  • Size

    1.6MB

  • MD5

    6efc576a0f12a3d6d9f5eb49d3755b2c

  • SHA1

    7818e5042c3088a0c817a5df9fbeb33be7702ff5

  • SHA256

    ff7c06008458a4b128bcff677e392b9a10bc661fa9216679fff22e6918584b8a

  • SHA512

    7bf8a974afc6abfac9dab62b5f334379089e5a6f2f8660add58d1b6f688efbafe5c7087ea458488edb7d01eb766ff2a9808d2b75909a8fa26684099fd0044eee

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwGpmbqD0CkG0L2tQZgGVsdz4+rjRLnfvaXF:knw9oUUEEDlnJ2k2ojqlfRq

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff7c06008458a4b128bcff677e392b9a10bc661fa9216679fff22e6918584b8a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections