General

  • Target

    ddc4d9ed9e125023eb0d1d5e76e1fd5238a8fe475cf7b42d5f50bd73be37be77

  • Size

    1.6MB

  • MD5

    2fddac7bdf3f328fbbabd5135cbe5588

  • SHA1

    ceda5210dcb8e95d436393c6508e248dc56f9d5f

  • SHA256

    ddc4d9ed9e125023eb0d1d5e76e1fd5238a8fe475cf7b42d5f50bd73be37be77

  • SHA512

    6d2cf26f821ac5cbe30dbd0e6e581b3a37343d9ab7e82f4e42a497b0aef1568153cabef79f353a39e20e63b31daabd2fddd865337bb9e0511dab15480466fdfb

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0RD/J3LipQXAPfKjUJGpiD4ZwV707nqMaOx0:knw9oUUEEDlOuJnR3MxJGO4milbFHG

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ddc4d9ed9e125023eb0d1d5e76e1fd5238a8fe475cf7b42d5f50bd73be37be77
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections