General

  • Target

    e52dcbee256a869fdc3e3fd6cd6c6b0516726e4338bdd4686f9702f3a9f05ded

  • Size

    1.9MB

  • MD5

    098bc2a4d0c226c66ac776372bd0f13a

  • SHA1

    032174089dc86c17fb4906180b15ad8ab65c29b8

  • SHA256

    e52dcbee256a869fdc3e3fd6cd6c6b0516726e4338bdd4686f9702f3a9f05ded

  • SHA512

    a8495ab5b291c610d57c7b20e0b37e18e53a42a6d28bf2453ed854f1719f5646fc44ba79c48425ef6cf22b4348c4b8665e924e77dea7a6a5dbfb34033c21ef70

  • SSDEEP

    49152:knw9oUUEEDlGUJ8Y9c87MQO0KJXr03u9C:kQUEEj/

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e52dcbee256a869fdc3e3fd6cd6c6b0516726e4338bdd4686f9702f3a9f05ded
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections