Overview

overview

10

Static

static

10

8391033dff...70.exe

windows7-x64

10

8391033dff...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8391033dffdc8edd4f308ea73b28889c8b098ab70609c5a04c2d28978182db70

  • Size

    2.0MB

  • MD5

    31badc282f229164cf0a280953c5e4d6

  • SHA1

    fa8d287a09b35621e4a9b145e1e68561c58c2fa7

  • SHA256

    8391033dffdc8edd4f308ea73b28889c8b098ab70609c5a04c2d28978182db70

  • SHA512

    235d2f78f0ded858a41404b96d4eb2be158fb17b18480cc828136ef3500e7e5ba9332414dc80dca2cd88bcc973ee596e3b475aeaaca4a044d323ea15f23e345d

  • SSDEEP

    49152:knw9oUUEEDlGUrMNcbQc22yDKHbAWeOoTG:kQUEEj5

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8391033dffdc8edd4f308ea73b28889c8b098ab70609c5a04c2d28978182db70
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections