General

  • Target

    40c4f431c0eff3b440a974fb318b5f61546476db01077c78e900b3df40fd3dee

  • Size

    1.2MB

  • MD5

    16b87224670c7669f5f9033cbd9fc337

  • SHA1

    55b841dcea57507dbd1b6e170a65cf7f4564aa77

  • SHA256

    40c4f431c0eff3b440a974fb318b5f61546476db01077c78e900b3df40fd3dee

  • SHA512

    89dc574e48a155b963856fe6b4a92c76119bc838d8582e19201f69dd458ec2cebe217d75f362f971f49a8322811ccd949c3909f194baf81b16878f486b027446

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmARgbvyvC5lKXhtRejWtQ:ROdWCCi7/raZ5aIwC+AKavC2eWW

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40c4f431c0eff3b440a974fb318b5f61546476db01077c78e900b3df40fd3dee
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections