General

  • Target

    02b3c72f7874f1f20d5af1ba7e3842a47dbfd2fb8ff3c9bbac06f00e5d9a6aed

  • Size

    1.4MB

  • MD5

    635dd253c5a0b55748002016e456d672

  • SHA1

    9143acddc04c3a44988bf73dce6b06a9995edc89

  • SHA256

    02b3c72f7874f1f20d5af1ba7e3842a47dbfd2fb8ff3c9bbac06f00e5d9a6aed

  • SHA512

    27d9fe63976dd1d1658cc6f42a0c15cd706efd0efd9110b7d4face9c2874cb8fae5b00224a398ac8723afd630d3846afbfcc58d1bee02a335b059b15a886f991

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8BoC09aYCmcxYraECNlCOq3vzZv3X:ROdWCCi7/rahwNUnj7Zq6n

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02b3c72f7874f1f20d5af1ba7e3842a47dbfd2fb8ff3c9bbac06f00e5d9a6aed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections