Overview

overview

10

Static

static

10

a5e8beb573...cf.exe

windows7-x64

10

a5e8beb573...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5e8beb57345c3be350ea902171dd8ebf968c49a3ab08a6b004b7be8bacaebcf

  • Size

    1.4MB

  • MD5

    fc1af9dc93a756415bdf9ad4c139d5d7

  • SHA1

    95f71ed91cc55f477ceb1746cf26a6aedf341f11

  • SHA256

    a5e8beb57345c3be350ea902171dd8ebf968c49a3ab08a6b004b7be8bacaebcf

  • SHA512

    c5045df4f1dd8926ec629ae22756e1699374be43a6d727b69b727b3fcc852863991bdeb53f7444a2deb3ed09503336cfe7367c456631525165d41aad050998b6

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727XL1+KVbiK6VOcGVl7/e2QJwz9d8Tn9u6MrGIS:ROdWCCi7/rahHxWkQEdhCh

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a5e8beb57345c3be350ea902171dd8ebf968c49a3ab08a6b004b7be8bacaebcf
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections