Overview

overview

10

Static

static

10

639e5f8071...38.exe

windows7-x64

10

639e5f8071...38.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    639e5f80713443a526504195d203ddb498c70a4cc6a630f6200864b5f9248938

  • Size

    1.4MB

  • MD5

    54ba4c0f1d7df0be212f0c7521271736

  • SHA1

    b6a33089f04ffa3d3c002c9dbfd71c754a0d9360

  • SHA256

    639e5f80713443a526504195d203ddb498c70a4cc6a630f6200864b5f9248938

  • SHA512

    48d1762275b142c08df65efe8794e71dcb816250975b39852ef3a253cf8a2edb0fff2243bba2f0495a4947dc0320fd1caa2342defcf67e25a4a0307072b86fd8

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727F15qbrund+fT+gsYb0i+6vLLZLs:ROdWCCi7/rahlqOdgCP

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 639e5f80713443a526504195d203ddb498c70a4cc6a630f6200864b5f9248938
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections