Overview

overview

10

Static

static

10

8663c80542...bd.exe

windows7-x64

10

8663c80542...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8663c805425ec9452bcaaf9c33dc878c7dc694645ec4f42c29315bbaafb2cfbd

  • Size

    1.5MB

  • MD5

    3b1c6b605691195d5070f5a1946c49f4

  • SHA1

    726f3f3604c1b3cf6b3810b9e78cc6899d0c7cdc

  • SHA256

    8663c805425ec9452bcaaf9c33dc878c7dc694645ec4f42c29315bbaafb2cfbd

  • SHA512

    ee1883dd185826ddba9d00cfe2d8bfb0fb97700b49daed03504bc609e265a136c58b4fa2798579b7de630e7c1e41dd9cfbc2ca88406209d5376c1e83389a0bf6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbc8lFad+tszICTC0SnOIcjZxweAYeT:knw9oUUEEDlGUJ8Y9c87MeRY8zak

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8663c805425ec9452bcaaf9c33dc878c7dc694645ec4f42c29315bbaafb2cfbd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections