General

  • Target

    98eb79e9c3fd4458b4cc7ed93d655ddcafdda17d007f6846b34d35296625ddc2

  • Size

    654KB

  • MD5

    d7df8874e5e40ec11d4d1669440cf7ab

  • SHA1

    d742bb2d191f4b2478a2d5c6983cead26fe2bbd4

  • SHA256

    98eb79e9c3fd4458b4cc7ed93d655ddcafdda17d007f6846b34d35296625ddc2

  • SHA512

    e948c7de7b31698dffd5d69b56c92829004622ade95ffc66f086f88cb329d2015dad0637c47aa10de0f7f8d6a068a2c9c51cf2f6937f658db4edb7542b4b925f

  • SSDEEP

    12288:g2sJvQKR5LAU9pF65UdANIse0ryNlyrSB7x8slU8MCgAmSS:fsJvQm7sK+/XrmNRlRZmSS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 98eb79e9c3fd4458b4cc7ed93d655ddcafdda17d007f6846b34d35296625ddc2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections