General

  • Target

    eb8d7874cb8535b380a6ab9e4149bad0c69d6b9558d7d2eeb5a37d1d8d927120

  • Size

    1.9MB

  • MD5

    209894d5792d68545866d64715fec3f0

  • SHA1

    2c6a24f7c5b306d246b89a7c0fdb6bcb273f5981

  • SHA256

    eb8d7874cb8535b380a6ab9e4149bad0c69d6b9558d7d2eeb5a37d1d8d927120

  • SHA512

    1462eca43fce4d97db4f8eb29429cd81da55732a56b7002538d9d8a02aaeee51d5ff09226f656e3eea736c0199d3a0581425174ace3f340125289e6ef8b3f999

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6zqxG2Z9mIhQvq8wd7D7Mp0M+I+gCCWcJbYScsGf3PzTxNp8:ROdWCCi7/raWMmSdIc1lNpEdxAggU

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eb8d7874cb8535b380a6ab9e4149bad0c69d6b9558d7d2eeb5a37d1d8d927120
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections