General

  • Target

    c253b358039214e5f311d9b44508a2f5c504a2fecce8f769c449b4c48231c8ce

  • Size

    1.9MB

  • MD5

    396ae4b878275314249c803d767ad626

  • SHA1

    e937b13aac87064655abd7d4f6665d286a062b21

  • SHA256

    c253b358039214e5f311d9b44508a2f5c504a2fecce8f769c449b4c48231c8ce

  • SHA512

    fa21e2b0e453a51e334ccb3de52b5216ccdea0837c0e251f49293586d3f28b134d291c6fa5a637a1cc1fabdfee6cdb5ce51bf9debc7fd94d0c46e9864748bd61

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0M+I+gCCWcJbYScsGf3PzTxNpY:ROdWCCi7/raWMmSdIc1lNpEdxAggw

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c253b358039214e5f311d9b44508a2f5c504a2fecce8f769c449b4c48231c8ce
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections