Overview

overview

10

Static

static

10

6d689fc941...aa.exe

windows7-x64

10

6d689fc941...aa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d689fc941a60e3381d2ae9ce29ba1546872d33814af661adf64efc352a748aa

  • Size

    1.8MB

  • MD5

    ad8ebe991703067e8775b49994091fb0

  • SHA1

    04651d878be103a7f5016d57aff4bb1ac6d80414

  • SHA256

    6d689fc941a60e3381d2ae9ce29ba1546872d33814af661adf64efc352a748aa

  • SHA512

    ca1f274a649cfd8d67e373dd247bd67a02f65f1090f34480316c61835c703164656d91c1c357bc39256a74d949ae2a0db7f959300530493c3182d5b5953697fd

  • SSDEEP

    49152:ROdWCCi7/rahUUvXjVTXptRmKWXkO1t7XSXRBA0:RWWBibaD

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d689fc941a60e3381d2ae9ce29ba1546872d33814af661adf64efc352a748aa
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections