General

  • Target

    52c9c4fff84a4d63c59d385581fd1f11b712d113c177d019a020c4d4f04e90a1

  • Size

    1.7MB

  • MD5

    e5279045682571e26d8cb42d1efef089

  • SHA1

    3c88b0fa185aed1f503dc2a32a807d4e2138a03c

  • SHA256

    52c9c4fff84a4d63c59d385581fd1f11b712d113c177d019a020c4d4f04e90a1

  • SHA512

    09445fe4757ca9347e832a7edbfb7de2eb9eb71250204a2b6e66228e66bbae33a43f2fe409bda01ca177b84512428801afd7911e2f2f270c240513093e3609f6

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTXptRmKWXcCCJnUb:RWWBibag

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52c9c4fff84a4d63c59d385581fd1f11b712d113c177d019a020c4d4f04e90a1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections