General

  • Target

    94ffe8a0fb88377efe218a90f7a9178c25284990f7972c10f6d3f6c781e8ef2c

  • Size

    1.8MB

  • MD5

    b13d169a01abd124ba9e12a41679607b

  • SHA1

    cd5841e09df00e57b2d8dbdc7b225c9a11b6f4bd

  • SHA256

    94ffe8a0fb88377efe218a90f7a9178c25284990f7972c10f6d3f6c781e8ef2c

  • SHA512

    68e5297598f883a150f24740cea712d3901f0b1ee995395038c0ba83ac1ba7907d719b7d748e542d18b3d01601745705912a220b0864eda339bebfaafe3ed176

  • SSDEEP

    49152:knw9oUUEEDl37jcq4QXDT6hXi4YLuA9zF:kQUEE3

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 94ffe8a0fb88377efe218a90f7a9178c25284990f7972c10f6d3f6c781e8ef2c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections