General

  • Target

    487503dd6634c79565ae33964f52e68692c46f64b4a49f50f6629a5a4c6d5da1

  • Size

    1.4MB

  • MD5

    050495a5b7f399033d1f4b8df88e2ceb

  • SHA1

    0bb5a563931564d03aeba534a77cb02c09eaa5cd

  • SHA256

    487503dd6634c79565ae33964f52e68692c46f64b4a49f50f6629a5a4c6d5da1

  • SHA512

    6257186da83a5409bfd83190e7dd1b1d4ec7400e55d2dfaacdfe42a301eaefb92f3a2f0389d7bd73cc3ae1f14c03c6bf029b13e29d0d862e8246d5861d3356e1

  • SSDEEP

    24576:RVIl/WDGCi7/qkatuBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DX+qtrp:ROdWCCi7/raU56uL3pgrCEdM/QxtgWUZ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 487503dd6634c79565ae33964f52e68692c46f64b4a49f50f6629a5a4c6d5da1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections