General

  • Target

    212cec51cbf62f474aad10556d9db487ad872ae6c2e6c6a7834c8a72f866b971

  • Size

    1.6MB

  • MD5

    975edee2b9e6c57935ded27be4470d3f

  • SHA1

    9634128ab2990ccce30ff6e049b1a8500fe3611a

  • SHA256

    212cec51cbf62f474aad10556d9db487ad872ae6c2e6c6a7834c8a72f866b971

  • SHA512

    956427892a6a1d8f36447971f95d0207552df3232c346f0d3dab5b4800421f3d88ad0e042b1f50d1f1b72e05eebe860d6067c4f276b280522b6e4e72da9472a6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8blOhG4zObcMyqqbziZVRZUVX1bjmw755:knw9oUUEEDlOuJc5cMKGPsPFwm

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 212cec51cbf62f474aad10556d9db487ad872ae6c2e6c6a7834c8a72f866b971
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections