General

  • Target

    21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

  • Size

    1.4MB

  • MD5

    ad9f499589d416dc194954318d59eb64

  • SHA1

    aeed9a2519282386cb98a4c0cd80b949afe47311

  • SHA256

    21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

  • SHA512

    488fef8759ad46b94a1542b93fc2f2aaf8f47addce3133c2d24228f91c698d830ed166d9ef1a0289bbf7a711c8f9a028012e73d57047c252eb0925783409cfdd

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCZmU:knw9oUUEEDl37jcmWH8SKJhS3X

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections