General

  • Target

    f1b9fad59ce7cae1007821d639588ab65f96bd07b3d4dbb124bbe7e4934fca6e

  • Size

    2.0MB

  • MD5

    4a4cd7d141bc2cfba252aa132651973d

  • SHA1

    0b75b34b7632c79e6d683efa322c5f2949e22e29

  • SHA256

    f1b9fad59ce7cae1007821d639588ab65f96bd07b3d4dbb124bbe7e4934fca6e

  • SHA512

    f88b956b8c9194bf74bd651e6c958d0764c77141614256288c7856f38cd4d14c4f91397ab803552f4a99f27a993c871a08708ef75a55dcf93e5544943f71fdee

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIQW/dLUoJlrz:BemTLkNdfE0pZrQm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1b9fad59ce7cae1007821d639588ab65f96bd07b3d4dbb124bbe7e4934fca6e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections