Overview

overview

10

Static

static

10

502ec8a61e...ea.exe

windows7-x64

10

502ec8a61e...ea.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    502ec8a61e3b71c554cd3b967aa6bcd19d4b754c26f0100399195ce220ff71ea

  • Size

    1.5MB

  • MD5

    2da7e784f7816360b56e9b24f05a0f63

  • SHA1

    3e956550ab73aeeb1dbe132edd9b6a54f41f1fdd

  • SHA256

    502ec8a61e3b71c554cd3b967aa6bcd19d4b754c26f0100399195ce220ff71ea

  • SHA512

    4e94154b7c58cbe9dddc14b17c689ec31f9c2f09fb6e86a5e5402a05e419966eb0a13952bd11d4ac37e2a0b65088a2eceb2dbab56953d73be611171a6fda8435

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78SVe4wtdopOAub7BTPfSwHhsnlIxXc8D:knw9oUUEEDlGUnwwA/BrbH6+n

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 502ec8a61e3b71c554cd3b967aa6bcd19d4b754c26f0100399195ce220ff71ea
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections