General

  • Target

    a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8

  • Size

    1.3MB

  • MD5

    4dc9318b1dbc223e8fa1910bd9d2c75a

  • SHA1

    14c62fb5f7b6921a77e667637c77088dbdeed46d

  • SHA256

    a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8

  • SHA512

    abda7cfa15843495a96e8f6348d5d2a6c691e4d819eaccb4caf5371676dfb68f7d84b4ec36023ae6ae49352ee21d82b8bffc13dea1a3f93b6873809036cc14b9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwd+t56p6aGu4DORZwTkhj0LQ0Z:knw9oUUEEDlnd+XRqJZwTKs

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a01a1418daa7d7dc0a86bfd4f306c32b90f0d7be8e8eb037bc0d5090800105a8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections