General

  • Target

    c5b88e03d2069488f0c0c3c20b0aa4c0887d30d7e9fb9b9c4fd1226f213170b5

  • Size

    2.5MB

  • MD5

    d3ac7a8e9ea6231d82194687409e7ea0

  • SHA1

    8cf6f9b31889c1d4583dd69166d6cac84d7de0d7

  • SHA256

    c5b88e03d2069488f0c0c3c20b0aa4c0887d30d7e9fb9b9c4fd1226f213170b5

  • SHA512

    3d411eb81e412bebfe8cdf3e915713d4ab72baf6ad09e470c37bed51db618c4f4eb4fe0ed3b135816f19d2ec283992fa05c201b3366614d4abd858024a0a9566

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcDwq6xkGA78LR7I:N0GnJMOWPClFdx6e0EALKWVTffZiPAcw

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5b88e03d2069488f0c0c3c20b0aa4c0887d30d7e9fb9b9c4fd1226f213170b5
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections