General

  • Target

    ceb03556a88c508342984e0df312d3be21f8ddd14137ee5b87d01df6603d2ffc

  • Size

    1.3MB

  • MD5

    139f9935db80e88eebe6ded2d0860d45

  • SHA1

    35f7ea4129c7ea7e065e0d0e1c0702ba23ee25f8

  • SHA256

    ceb03556a88c508342984e0df312d3be21f8ddd14137ee5b87d01df6603d2ffc

  • SHA512

    49d1346af94a4d17a64f8f2959cb021d87b7306bcc3401e670c9cf9064acf67f6ed46fca3a31fc7c5674c81e22a2a86197276e16178925e3be1b4c18dcd2f2d8

  • SSDEEP

    24576:RVIl/WDGCi7/qkat62wT83PzKgAm0PyFLb//e3XZXW+NguyN+taVA7Iers:ROdWCCi7/ra+GvAFnhyN4ah

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ceb03556a88c508342984e0df312d3be21f8ddd14137ee5b87d01df6603d2ffc
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections