General

  • Target

    2f136a03d6000af4e78afd86c8570114860127c8cf0b9dd5bf9545bb76f5e0c1

  • Size

    1.5MB

  • MD5

    0f6aed46eb84925cdf9095dbc8504900

  • SHA1

    9c909628382277f163ca61c253f6d520f85e9e80

  • SHA256

    2f136a03d6000af4e78afd86c8570114860127c8cf0b9dd5bf9545bb76f5e0c1

  • SHA512

    e953e02f0cccf3ca2dc11cf7d0c55156de5e5883516ba354811eed05acab96fa84f054c043360a6d93a0b2711b292e55581089f5d572f9ac7132e3a545f46a99

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBosl7LiKbWZhGOoB/UmjBm:knw9oUUEEDl37jcq4vLWThmjBm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f136a03d6000af4e78afd86c8570114860127c8cf0b9dd5bf9545bb76f5e0c1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections