General

  • Target

    057279d9eb0e300512fbdb0a0f608812c2b2905abe0ca24edd8cc06b53ea6013

  • Size

    1.4MB

  • MD5

    b7ef92165a33709db864d1048e0665bf

  • SHA1

    b39d2eac130cfe0408ea21cb8e50bb8dddb30a1d

  • SHA256

    057279d9eb0e300512fbdb0a0f608812c2b2905abe0ca24edd8cc06b53ea6013

  • SHA512

    c801471a79dd9507396d3e44426d70bce04f78c388905805772bce104138abe372882fe69e10cbeb30c46f42c88c6d63c7ff01a8d983815c7ef86b23b33cf712

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zzDwD/YCgU+Lqq6a9vu2kjGAiYYqmLR7eyCZzq:knw9oUUEEDlnDwq6xkGA78LR7eyjVB

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 057279d9eb0e300512fbdb0a0f608812c2b2905abe0ca24edd8cc06b53ea6013
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections