General

  • Target

    ba742227141592066daa0c7b88cce59bb373a25d177d0c4fcc6e43221fb318c0

  • Size

    1.1MB

  • MD5

    4f26a19b3519e23d70aa09849526fd43

  • SHA1

    d205de37ccbfd90dc2c82d21c1eed9986c85be0e

  • SHA256

    ba742227141592066daa0c7b88cce59bb373a25d177d0c4fcc6e43221fb318c0

  • SHA512

    8a4d2434ad7023f4e82005a4aaefb59e973979f919fc0a3f3afed4bcbaa7ae4d95e7807cf38ebcc81a3a47aa5802d03e318308e60b3cfbf78c7e45a90d45bc3f

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DX+qtrc:ROdWCCi7/raU56uL3pgrCEdM/e

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ba742227141592066daa0c7b88cce59bb373a25d177d0c4fcc6e43221fb318c0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections