General

  • Target

    5cb6122c13613034a4b83af9e7f4403124050628fdf072788e24061d5b5d1816

  • Size

    1.3MB

  • MD5

    0b4c21157b34b51c99847b4b6b389ca3

  • SHA1

    fc45b2d98e680e0869d14b884d7843e1e3ae6f21

  • SHA256

    5cb6122c13613034a4b83af9e7f4403124050628fdf072788e24061d5b5d1816

  • SHA512

    d4c1978c6987bcc6a48f105fd8ab99fc3235f1612ae497aebc9d8a47bb76e9d1aa734ed717aebb7341b19d7e7cd5e33ac2ccf51f4f75cac2ed0bd4e1e822e9f7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727f8UhNnwSz7TD0SqKpTIr2ejZvU67NnX1vQfZ4Ix:ROdWCCi7/rahUUvlhqLr2+W4kn

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cb6122c13613034a4b83af9e7f4403124050628fdf072788e24061d5b5d1816
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections