General

  • Target

    2515962e00a4e8e26ad9e97ec8a87b5d8a4c13514a00284b193b6f94471b0223

  • Size

    1.5MB

  • MD5

    6c7aa525a1eb1820ea9545e510e688c7

  • SHA1

    a536dcbce62f2b6af109920e113c2f70c4d56cb7

  • SHA256

    2515962e00a4e8e26ad9e97ec8a87b5d8a4c13514a00284b193b6f94471b0223

  • SHA512

    1b674aae5f7552b160d1971aa12901faa1b55bc399372c7cce6b9d2268f4bef1aeb70c2135fc482a1e419d2e343023fe8bfa52be415853e93046fc2f4e0fb7e7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoVzBhgOX1cysFOP0qdrOZtpwfMwKvd+khDeYg:ROdWCCi7/rahFxxXgA5Bc+QvdL5GD

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2515962e00a4e8e26ad9e97ec8a87b5d8a4c13514a00284b193b6f94471b0223
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections