General

  • Target

    f2547a68cab114aa908630dffab962ea4b06beb3b7821a462f9c03f40ade6f64

  • Size

    1.4MB

  • MD5

    525a65087b5f816c0be1b7ff2fbbcf9b

  • SHA1

    6be3de693bff26b22f9692dd64776755ffab625c

  • SHA256

    f2547a68cab114aa908630dffab962ea4b06beb3b7821a462f9c03f40ade6f64

  • SHA512

    dd14f8cba57c77bb66c1cf9af094676d9004dec95832e38a7a8a91fddba19bcb4a19fde1c95c2d161d207736defbcc27b947cf910e07942255f9ea71b3e03067

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9xyCyt0RCciNHV2mZuDcoc:knw9oUUEEDlnDwq6Sd0R7qV2YN

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f2547a68cab114aa908630dffab962ea4b06beb3b7821a462f9c03f40ade6f64
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections