General

  • Target

    f376713cf3b28bf7eb7d375125736279585c546cf07cc3bfad4eaf870249d158

  • Size

    1.6MB

  • MD5

    f5dd03ed92e684fc6727c31e56bb0340

  • SHA1

    23fdf95cd5c6ba16a3e63d35f8e8454b01400cd7

  • SHA256

    f376713cf3b28bf7eb7d375125736279585c546cf07cc3bfad4eaf870249d158

  • SHA512

    96594360193869e17be90eb6f619d0e9e1dc38045daa27a0cf8528d48a8853fc0f62def104f48d0e36db4b8d4556fc7346b8bc613191087987ec3c147d13fb09

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgcdt9vvQNsUriFgvoHEsXRIQ144Mz/:knw9oUUEEDl+xTMS8Tg3aIM4sYB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f376713cf3b28bf7eb7d375125736279585c546cf07cc3bfad4eaf870249d158
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections