General

  • Target

    fe1bb53be5a1d44ea5215d59f3aa803aa2c3084cf2b25f9ff0a90c4dc1dab891

  • Size

    1.3MB

  • MD5

    b1a25430d496c673295f53b8ef17cc7a

  • SHA1

    bb605432ca63fcfa82edb5146233a28079a1bde1

  • SHA256

    fe1bb53be5a1d44ea5215d59f3aa803aa2c3084cf2b25f9ff0a90c4dc1dab891

  • SHA512

    11e28a63dab01b291f2d5e071e6a92433a139930d7bf1dc1e8ca07390c8c3284161e2ad7efc8c3fc187309f05421df1d070c902db91cd6b32943c31fc6abfb79

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727P/Q50xJiYYIFddXpa2qVWhB6LlT80bcT+Pa0:ROdWCCi7/rahw5UP6Q+C0

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe1bb53be5a1d44ea5215d59f3aa803aa2c3084cf2b25f9ff0a90c4dc1dab891
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections