Overview

overview

10

Static

static

10

ef92c2c1a2...16.exe

windows7-x64

10

ef92c2c1a2...16.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef92c2c1a2169801abe9e3b85e01cef245974ff3c8a231efa1ac39b82828fb16

  • Size

    1.3MB

  • MD5

    c69da05e398a298328549605eb960bb1

  • SHA1

    a16281e8ce209754bb11ff6473f822b8dcefcf35

  • SHA256

    ef92c2c1a2169801abe9e3b85e01cef245974ff3c8a231efa1ac39b82828fb16

  • SHA512

    9ccd72703f057d2b1e57be1fd619120be66db74616096fbd37822bc27305dfe9979cd8ea0177b2f415aec9051fc3909a9dff00b9eee4ca1cb70b66dfc26e2efa

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727vrNaT/6CFdDQC7FY5ANGrTQYkbb8RfSGggD3:ROdWCCi7/rahW/zFdDEANWQYkbe93

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef92c2c1a2169801abe9e3b85e01cef245974ff3c8a231efa1ac39b82828fb16
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections