General

  • Target

    4a1944b00798734c5583adf0c1c44809ac6f570e7b387304f34beef21871e686

  • Size

    1.4MB

  • MD5

    039d297e9999aecce3ebaa3da13891f4

  • SHA1

    394006c982690cc786c609f2d6f3d6de58ce8a33

  • SHA256

    4a1944b00798734c5583adf0c1c44809ac6f570e7b387304f34beef21871e686

  • SHA512

    89ef3201e23812663abb24440ff86f90128ebeadb5fcad4743c4dd10e8abe9aa5a8b7628762fc681c43ab0966109dc3756cebd42075091bbcfad83c7009ca3a5

  • SSDEEP

    24576:RVIl/WDGCi7/qkat62wTlvck3AWsu4JFX3fNyzB/HVj9+OYb1CQZ5CLiAjCu+TZb:ROdWCCi7/ra+xeHNNPw36OjCu4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a1944b00798734c5583adf0c1c44809ac6f570e7b387304f34beef21871e686
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections