General

  • Target

    be31149337183797e25896b3930d79dab3940b6b3126f920f415d9bc6c177698

  • Size

    1.5MB

  • MD5

    5de69bfb4c34d56c5ee54144e49f1ef0

  • SHA1

    9c6b49690d1ea893c81c51fd4391b06fad673951

  • SHA256

    be31149337183797e25896b3930d79dab3940b6b3126f920f415d9bc6c177698

  • SHA512

    345ca3c0cafcd27d8277dc83e87911df12dac741c1fb7fb43ed8134ec54f3dbe59c6a7f032f757cfb2680cf4caeae62f2b9dab65c583f9f424149dd525e4eb4b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwxOpyinKCB9WIoC3IT5xHvHsaXiJR/VdQNV:knw9oUUEEDlnCNfeT5J0aXiJwXRf

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • be31149337183797e25896b3930d79dab3940b6b3126f920f415d9bc6c177698
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections