General

  • Target

    0ade152f372e3cbdbda07dd65e812f598df811be9947b7f96e3fc023665b8829

  • Size

    1.9MB

  • MD5

    0c127865c82991cde7c48276e3db1d0c

  • SHA1

    76a98add3532f5127bd1c41221200867153535e7

  • SHA256

    0ade152f372e3cbdbda07dd65e812f598df811be9947b7f96e3fc023665b8829

  • SHA512

    bbe52b06f8a0949fc9c3c0ef0246fc708f75e8b3937270724adf54ce3c6619619971e35c45181cf3fcb1836e2a924e4e50adfd745261daf82213efef161bf18a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcZ4GhX/dERVwURI6ElxjXbCwsLi+g:knw9oUUEEDlGUJ8Y9ctYVk6+vT9BLR

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ade152f372e3cbdbda07dd65e812f598df811be9947b7f96e3fc023665b8829
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections