General

  • Target

    e1b55cbdbdcd4b83f67f9b6a8806b1ea68e30f32583b0f27f838812b54dd587a

  • Size

    2.9MB

  • MD5

    ae33c73f5334710edd1894c3f49ab8d6

  • SHA1

    af429ec36ae15e91f565c6021826876c563ad134

  • SHA256

    e1b55cbdbdcd4b83f67f9b6a8806b1ea68e30f32583b0f27f838812b54dd587a

  • SHA512

    efb012394afa957a139044d67f0800007e0dc27af5bef6656add2039ea49ab1ba04ba27a8270920bd9d1dc5634e31e815c09fa370aa4d75ca159eca63a09a57e

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUh+hNclC:N0GnJMOWPClFdx6e0EALKWVTffZiPAcv

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1b55cbdbdcd4b83f67f9b6a8806b1ea68e30f32583b0f27f838812b54dd587a
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections