General

  • Target

    8aadf3dd0e8f77990e58833d1e167702c48f8778976cd741a87cafb1e7f2c4dd

  • Size

    1.5MB

  • MD5

    0e9e646acd055ece2528867b945dbd77

  • SHA1

    8a4934fc3ab483c09630ad5ac5bdf1f3616a6d7f

  • SHA256

    8aadf3dd0e8f77990e58833d1e167702c48f8778976cd741a87cafb1e7f2c4dd

  • SHA512

    a5f1a153ccd81fea94cfb4cdbdec3659dfaa95c0a876c7c42bd3be2a906042658ba78c9f2f5689633a1ce289049058eda86ae4abd6c2056e3671e32f9914d751

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Ropm6eTxC1UyRWtb0dfM4lL2Elg5Hx:knw9oUUEEDlOuJzyR7pVIR

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8aadf3dd0e8f77990e58833d1e167702c48f8778976cd741a87cafb1e7f2c4dd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections