General

  • Target

    c2dfb04a00517911b316cfab3ad0b3592f6ee17f44f4d95473cde4a1a1752455

  • Size

    1.6MB

  • MD5

    fc58a41f531d28316f07dd81050d6d27

  • SHA1

    f2d9fa0223b24010c9e84c56793bbda2f86ed76a

  • SHA256

    c2dfb04a00517911b316cfab3ad0b3592f6ee17f44f4d95473cde4a1a1752455

  • SHA512

    a24ccaaf5307cd3dadc2bddb61aebb466ac27fe66f68e9358b77ade4c691fbe41344ba7f74bff4abfec68d3513d4df1aa02243f77c2a0988d40b033ed459a230

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqdt3/mbq5P1uU9FhW3NEWF:knw9oUUEEDl37jcqdt3uwMNL

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c2dfb04a00517911b316cfab3ad0b3592f6ee17f44f4d95473cde4a1a1752455
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections