General

  • Target

    66034905c4fb1a2fd695450a9ae73b01bb023f44c27b4b271f2bc95b2d25857e

  • Size

    1.3MB

  • MD5

    1b6e91a5e069e0cc84971b105726e52b

  • SHA1

    0946f167f87965978b10571054ea8cbf93ce0a21

  • SHA256

    66034905c4fb1a2fd695450a9ae73b01bb023f44c27b4b271f2bc95b2d25857e

  • SHA512

    18912b607948aa8aed4687c5275fa5fa9e0b062b83b741280aad14fe432ecb10143cfa34b6df6b628a74c4e6fbd08f8cce0f35afa8d5d77861e97e2488b987e4

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFDnFelC3yH09MvhCJ7Gkj5x:ROdWCCi7/rahOY7CH09QhCB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 66034905c4fb1a2fd695450a9ae73b01bb023f44c27b4b271f2bc95b2d25857e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections