General

  • Target

    027f66daa98969fee241b2536f31cda1e65bce34a72e9962a82d5e02876ea30f

  • Size

    1.6MB

  • MD5

    5a370c96c7a690a7639e08572670ac3d

  • SHA1

    f341c11c05d1817d51d53b5c6a2618598dfeb407

  • SHA256

    027f66daa98969fee241b2536f31cda1e65bce34a72e9962a82d5e02876ea30f

  • SHA512

    c9a8fa85102fa94c6133b07603122f1f9bca016ee829acdfd48c6971500d89190390d2b09b9b08f89793ca69b086bec71dbf6a2a58e4872fbedfe9aaed08b938

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlia+zW7MdbCbc5wJ+Ph8jiiguUJ9WrNQ2pc:knw9oUUEEDlZMVyc5K1jiizwQJrc

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 027f66daa98969fee241b2536f31cda1e65bce34a72e9962a82d5e02876ea30f
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections