General

  • Target

    0cff99d0c14e5bb7c6ed290ffeb1a03ddbb5308e3fe26815c86d5f44d0d629e9

  • Size

    3.1MB

  • MD5

    48afb2e617cf9c59c4b6cb62b0313985

  • SHA1

    33be0bce050d27127a49da01ed558e22566319db

  • SHA256

    0cff99d0c14e5bb7c6ed290ffeb1a03ddbb5308e3fe26815c86d5f44d0d629e9

  • SHA512

    16504036107d63f194722dffb1ca43da6b63c3f6fa414d9bccc7d65a61736b125d7366db868d3abe29ed6855fd6a79e3f5929e50c6693709221c1b679a78cf05

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4N:NFWPClFd

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cff99d0c14e5bb7c6ed290ffeb1a03ddbb5308e3fe26815c86d5f44d0d629e9
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections