Overview

overview

10

Static

static

10

eda6a8a648...0c.exe

windows7-x64

10

eda6a8a648...0c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eda6a8a648f7b6e5f03e0958f383e56e32b41e14db04deed9569f68384294d0c

  • Size

    1.6MB

  • MD5

    e4005bed8665babb0268135296a8ca06

  • SHA1

    8f81912faabc7fe03a9b7916537621a3fdcb14c3

  • SHA256

    eda6a8a648f7b6e5f03e0958f383e56e32b41e14db04deed9569f68384294d0c

  • SHA512

    530536cbe1d366d7d4e1c8b20cc620272e274c697b06bbac5e97dc120ce90bd7e6a2f206146e5f30c2a123d9bf564059c1ad4ae1d613275e1806af8048d0361c

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTRdf5k5p8iKyiGsIuUA:RWWBibaZ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eda6a8a648f7b6e5f03e0958f383e56e32b41e14db04deed9569f68384294d0c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections