General

  • Target

    0e5dca32f5adb34573e94119f93b4711afffb94ed7d98f94e07fa9b92a8760c1

  • Size

    1.9MB

  • MD5

    ff2dff9ad7c894872f39ac437161ebc4

  • SHA1

    692773dcef2adfc7f07edab0bfbc5e41e043957e

  • SHA256

    0e5dca32f5adb34573e94119f93b4711afffb94ed7d98f94e07fa9b92a8760c1

  • SHA512

    09ca2b42db59cd3c3e48c4b913a1ee0375aa6c023997d3c717c6ae14a7dfdebab9187a7782a1e7c6fe3ddca8251bca6146840adedfe5b208cc8b85d69c3af338

  • SSDEEP

    49152:knw9oUUEEDl37jcmWH/xbbFN/NM5hAf2rXY:kQUEEu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e5dca32f5adb34573e94119f93b4711afffb94ed7d98f94e07fa9b92a8760c1
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections