Overview

overview

10

Static

static

10

f04502f2d8...8d.exe

windows7-x64

10

f04502f2d8...8d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f04502f2d8b3d63a960d30241fbe41f9385c35c5a67e95f9d06188f09a53ba8d

  • Size

    1.3MB

  • MD5

    07ebf59c51cc83ae027cd79d3b395d5e

  • SHA1

    cc25781566e03abf5b0ad057ff0a3db7e895a617

  • SHA256

    f04502f2d8b3d63a960d30241fbe41f9385c35c5a67e95f9d06188f09a53ba8d

  • SHA512

    714ecf42643fc66631028af7ad6a7fbb8afb3481f16a69203608422b685d428cd6780b6c7885a0a1e663572196b4659ae95bc39e72dd149ca885f32848e8f055

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMiBsQVWGoPN9sZAUsv163iUZ4SVs:ROdWCCi7/rahFD2P6QV8NqZuPD

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f04502f2d8b3d63a960d30241fbe41f9385c35c5a67e95f9d06188f09a53ba8d
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections