Overview

overview

10

Static

static

10

04ff6d18b8...f3.exe

windows7-x64

10

04ff6d18b8...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04ff6d18b84fc179d1201e3b18e9daf1b3b3310f443d64e60d2b38e04d544cf3

  • Size

    1.4MB

  • MD5

    61c10e36fd76a7d8ad324ee69cf02727

  • SHA1

    79418bbfdc4c2f3b41612a9ef899e7d1fbdc3f2c

  • SHA256

    04ff6d18b84fc179d1201e3b18e9daf1b3b3310f443d64e60d2b38e04d544cf3

  • SHA512

    b44b2c32ffc837490cd4bbd2d0e66279483ad4d92c3057dbdb6ad776732fd78010c4578620bcfa2b8202a16951af593df3dc49ffe4ec6c825013da892321ee7c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosl7LiKbWZhGOoB/C:knw9oUUEEDl37jcq4vLWT9

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04ff6d18b84fc179d1201e3b18e9daf1b3b3310f443d64e60d2b38e04d544cf3
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections