General

  • Target

    eafaed568b5ab1531493d70e086fef8c92154b4d5d229a44b016e8c48ff9b297

  • Size

    2.0MB

  • MD5

    ed374a44335199c363d6b893bb505c60

  • SHA1

    450aeec7a911d70fd9a86182bb8c58ffed85d425

  • SHA256

    eafaed568b5ab1531493d70e086fef8c92154b4d5d229a44b016e8c48ff9b297

  • SHA512

    aad0b56e0c612ab2f7429b3597130b7ee25b825538c7e71ce5fdb4d8fbdc962f1d66f95b52e347019d7df6ce27051abd305c76f495296172be94d255fe795592

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0M+I+gCCWcJbYScsGf3PzTxNpS:ROdWCCi7/raWMmSdIc1lNpEdxAggHK

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eafaed568b5ab1531493d70e086fef8c92154b4d5d229a44b016e8c48ff9b297
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections