General

  • Target

    fde30e41b237d3d9a01fe1578e071dc33cb5a95887fb70c737dbc0800d4a04a0

  • Size

    1.5MB

  • MD5

    676f1670d733a607a108b1292b05a013

  • SHA1

    b8a72e3e46a267e356f42483dd51bc026f968c5a

  • SHA256

    fde30e41b237d3d9a01fe1578e071dc33cb5a95887fb70c737dbc0800d4a04a0

  • SHA512

    c93fb3813547b4d4b44b747b6112c3d2c0f4ae8230e30db9be5a01d64e516e1c06fec6cf694e74019ecc1f232c5983eb0eb76a4b891616635cfd5db7dcd5fc06

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARfHlivDQ3BzKdp+a8k4PUQx6f0j:ROdWCCi7/raZ5aIwC+ABcizEU73xFj

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fde30e41b237d3d9a01fe1578e071dc33cb5a95887fb70c737dbc0800d4a04a0
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections