General

  • Target

    fe5acee83f0ffb827674bcf3de2f41c11f3f0f18d3e490feabd236fc93afb86c

  • Size

    1.8MB

  • MD5

    f4d1fa0cdbdce7ad5309c979476309e4

  • SHA1

    c4b5804f4e327122bd0f688f8bee78fbc7e65d56

  • SHA256

    fe5acee83f0ffb827674bcf3de2f41c11f3f0f18d3e490feabd236fc93afb86c

  • SHA512

    ed1604525b1012a6326f3333bc2f1ba55ee75e498062c440a702e380028c5557dc8612e0450ac7dbac41f3bec7b952fe38c875ee8196832e8abc89b0c29be881

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOGApwJbxgU67tqSNP3l5M7XkB:knw9oUUEEDlGUh+hNGTbu5bKd+

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe5acee83f0ffb827674bcf3de2f41c11f3f0f18d3e490feabd236fc93afb86c
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections