Overview

overview

10

Static

static

10

b29da59a87...3f.exe

windows7-x64

10

b29da59a87...3f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b29da59a875e8ba852b7ebe4747298e3a998ab3cf1e79bfe8584fba54e68ea3f

  • Size

    1.6MB

  • MD5

    0ba45b604e49d72a00e417418844cb9e

  • SHA1

    39cad8c33468dc6d02d0dee27e67337d47d0914d

  • SHA256

    b29da59a875e8ba852b7ebe4747298e3a998ab3cf1e79bfe8584fba54e68ea3f

  • SHA512

    b6dfdd4ce97ed6590b034ba3754825aa25ead3aee8664741ef46881c73c5640fbb029b13f852959f21fa97159aec88c3eba63203d6ba9e6f0b52defd420861dc

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTXptRmKWnv8eMd8:RWWBibaq

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b29da59a875e8ba852b7ebe4747298e3a998ab3cf1e79bfe8584fba54e68ea3f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections