Overview

overview

10

Static

static

10

9264480b12...62.exe

windows7-x64

10

9264480b12...62.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9264480b122be114ec8fb1ab857e428b20b77ab23a3e15a0595e9b7c2cdd5662

  • Size

    1.6MB

  • MD5

    2f7937d257d3d1343de0cfadc21c2ddd

  • SHA1

    85f153ea7e98c970eedee4f3820b7ad8789d8f42

  • SHA256

    9264480b122be114ec8fb1ab857e428b20b77ab23a3e15a0595e9b7c2cdd5662

  • SHA512

    92cf7fc82eada8457283079725c0abff2a7c11cbf0526c250e17f0d9319f036bbec2a2c9d2d9895999d0c53531a24b4069e09bc260f2f9072106461e8f0613b0

  • SSDEEP

    49152:knw9oUUEEDlOuJv0oD5WBsv5AK6kxGTnbaE:kQUEEK

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9264480b122be114ec8fb1ab857e428b20b77ab23a3e15a0595e9b7c2cdd5662
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections