General

  • Target

    ca49cfed48f22de049b6d6065738ca1bb349a824baeccd6def2b843bce72c784

  • Size

    1.9MB

  • MD5

    665d0a7ef665c81b50738bab1ce856c8

  • SHA1

    d45f26d56f6eeeca8a559c30400e4f5e270c64c7

  • SHA256

    ca49cfed48f22de049b6d6065738ca1bb349a824baeccd6def2b843bce72c784

  • SHA512

    09e3f684e6e34abcfe950cb8b7c10aca362df4698f6cff5abfe4892cbfdb5a39ffb710a3e1d536b892c24d9c9b329007c0b09966ef898a7d1f2cae0ad62de669

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcqkeBWF3WAv4op8MDu7Edr2gKFkKLE4QcH:knw9oUUEEDl37jcqMHdooeqGwUHSW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ca49cfed48f22de049b6d6065738ca1bb349a824baeccd6def2b843bce72c784
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections