General

  • Target

    56accd75860ead447a3e826f23ea7797e6f783b0c71a24c7a1296ed72d0e4d9f

  • Size

    1.9MB

  • MD5

    2cc358e868193de0479e7b28f24151b5

  • SHA1

    fa00c42ac258b0c569f892821dd69d340d09e07d

  • SHA256

    56accd75860ead447a3e826f23ea7797e6f783b0c71a24c7a1296ed72d0e4d9f

  • SHA512

    ac23aff598372c6b94900648c05e0896fccc6c910df1339d7f4a81fc504c25bd3d62e4a01810127caaf128e19df2559e33a1ea3b485fa3ee5cfeb83d882d855d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiApn/ROmvG8rCSZmRRXnllf92g8Zchf:knw9oUUEEDlGUrGiAl/+SZmRpb92geQ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 56accd75860ead447a3e826f23ea7797e6f783b0c71a24c7a1296ed72d0e4d9f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections