General

  • Target

    4b5cea191f055035139957cd4fbf802b99016f1be84970012568c0345cde9659

  • Size

    1.3MB

  • MD5

    3f615fef504bb4b9a279cd401e964576

  • SHA1

    965c5aee56c0d99a8afcb0f7378fc5d607c1e240

  • SHA256

    4b5cea191f055035139957cd4fbf802b99016f1be84970012568c0345cde9659

  • SHA512

    0f47c366427108a93f7fa56774394de6c887e8b6c0f8dbdf18625bc784860126eb7e91a68f4cc26597ecacbec63a278fd1680d8a61f10b384fda3e5b41aad2e0

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8BoC09aYCmckHoZmleOJm3:ROdWCCi7/rahwNUlg3

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b5cea191f055035139957cd4fbf802b99016f1be84970012568c0345cde9659
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections