General

  • Target

    2b7af9d498accdb54b8ab35047d183596da4201af29a4b8cf6e76757b2e67b4b

  • Size

    1.3MB

  • MD5

    78c28c0bd75e8d314c03b84466e7b707

  • SHA1

    20ea0513a909ebc9684830cee2d79ff925a85041

  • SHA256

    2b7af9d498accdb54b8ab35047d183596da4201af29a4b8cf6e76757b2e67b4b

  • SHA512

    4504ea7c903c8e90cc0f9836ae71aaa8b55f24b25911c4407a1b4e840c680c9937702705c0f08a279affd34d3da670783935d9f09505a275fef785768ce07a75

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQC7FY5ANGrTQYkbb8RfSGggx63:ROdWCCi7/rahW/zFdDEANWQYkbeC

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b7af9d498accdb54b8ab35047d183596da4201af29a4b8cf6e76757b2e67b4b
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections