Overview

overview

10

Static

static

10

cf336a29be...72.exe

windows7-x64

10

cf336a29be...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf336a29be27e0f12d772d29da34636711529ec1082bf37b00d5c9a873dcbd72

  • Size

    1.9MB

  • MD5

    a766d9d320add1ad030ccf5bc99e3d0f

  • SHA1

    fd29639e214cf66efa47e2f8d6a9dbf6ef46cde5

  • SHA256

    cf336a29be27e0f12d772d29da34636711529ec1082bf37b00d5c9a873dcbd72

  • SHA512

    33decf3e6883a9f46303ac87f787e39dd84626b1ff9cdbc726c58b433b2d713bb9318b0ef26c253c4d5e5cd7cdd84d29e9843e23f5cb05c5185061c9e8794018

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82Sfl:NAB

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cf336a29be27e0f12d772d29da34636711529ec1082bf37b00d5c9a873dcbd72
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections