General

  • Target

    644c0c4c2cf9adf73de5b981f687d2490e02fa6dde5443be31c20200ca9a9a7e

  • Size

    2.6MB

  • MD5

    5b063ac486e96953a8b71de396ba1cea

  • SHA1

    59a12eeccc46453060803abaf9b2f29932c2c3f1

  • SHA256

    644c0c4c2cf9adf73de5b981f687d2490e02fa6dde5443be31c20200ca9a9a7e

  • SHA512

    f0ef3ef2c996428449a9d399319e3a921ae17d7988c90e2fdbcdd5a2c5ed45b82c99d4d62fbcca79bcbd799665984d77ddf41f6be2c67e98a3164b4e8668c6c1

  • SSDEEP

    49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH8SKJhSns:w0GnJMOWPClFdx6e0EALKWVTffZiPAc4

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 644c0c4c2cf9adf73de5b981f687d2490e02fa6dde5443be31c20200ca9a9a7e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections