General

  • Target

    386e57e3eaf9aae81fad609bd3e8b6fa379ab7097bf37425547ed3552b3796c6

  • Size

    1.4MB

  • MD5

    c988d3d146a9285fe818d36a9b29c27a

  • SHA1

    87345e4f90a04c32784b3c2216b6cce95bebefc9

  • SHA256

    386e57e3eaf9aae81fad609bd3e8b6fa379ab7097bf37425547ed3552b3796c6

  • SHA512

    491d261643dc7c8ef8f221130f40a9e31554a682d625adcd33f28a7d7b93b9c7cf4b75a072672a3f8d60ea8385194177028bd49877d6ab426cebf495acb013a2

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727uROGdN1cASXv8BoC09aYCmcxYraECNlCOq3vzZv32:ROdWCCi7/rahwNUnj7Zq67q

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 386e57e3eaf9aae81fad609bd3e8b6fa379ab7097bf37425547ed3552b3796c6
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections