General

  • Target

    8f338693ab9752e4371ea29a0a7980ed47f3b7661e40dcaa0404680b77acd4de

  • Size

    1.5MB

  • MD5

    156cb26e7ed566b394aab782f489c856

  • SHA1

    8f3785553e3fe1f7028a45b75de14894f1804403

  • SHA256

    8f338693ab9752e4371ea29a0a7980ed47f3b7661e40dcaa0404680b77acd4de

  • SHA512

    540d954d448e8e9d5ab5d9a5561f0adc757da8042a3a462d452311c41450b4ddc6d229fbce6d917646ffa3bcc2c5058cf84a4eba587e5e783c4e2371b8957442

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Oi8T1l4YLk1o2bPmwbGrFZ7p2Ydbf/FoCvzgN5qYHuQQQn:ROdWCCi7/ralHs1PTma87Xx1gOqn

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f338693ab9752e4371ea29a0a7980ed47f3b7661e40dcaa0404680b77acd4de
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections