General

  • Target

    5a93ae2bc3fbf75b0f84c4665b5195c20baae0d40ae396caa9cb790882872275

  • Size

    1.4MB

  • MD5

    bfff307237b830f1aa8f9199a73e74f5

  • SHA1

    1c705bb9a6cf777ca9bb88d31bc690ef954c3e2b

  • SHA256

    5a93ae2bc3fbf75b0f84c4665b5195c20baae0d40ae396caa9cb790882872275

  • SHA512

    84204c2c2cbe08a38b679753f000926dff31b97fc0c8beaa58c8e5069eb2f9a24a7ad133997be3d4455fb17ad4843bcc5dbdaa739aa23257898be52b3ad7b255

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsi51JrtGYcokRo9yj/GY6k8ZP1B:ROdWCCi7/rahlqOdg/c1t/8tL

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a93ae2bc3fbf75b0f84c4665b5195c20baae0d40ae396caa9cb790882872275
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections